2023

1.1 October

1.1.1 Upcoming "The Hacker Scene - 1983 - 2023" E-Book (2023-10-03 02:17)

[1]
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Dear blog readers,

I’m working on a new book. It’s called "The Hacker Scene - 1983 - 2023" where I aim to dazzle you as always and as usual with all the juicy technical details that you’re supposedly used to by now and will hopefully continue to be.

I intend to release this throughout the Christmas season online for free on my [2]Archive.org account.

Thank you.

1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUEFrRzubWM8sj23Dj_4iXp1EomMyrG8QkdNaXRztx6aODg

oit28Q0plE64OooE1c6ZVtNAIJbPUbxKmyzYCXcNwsAjQVQdbslVMU

2. https://archive.org/details/@ddanchev
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1.1.2 The Most Innovative Leader in Cyber Security To Watch in 2023 Magazine Edition (2023-10-03 02:17)

Dear blog readers,

Here’s the original [1]article including the PDF [2]here.

Thank you.

[3]

1. https://ciolook.com/in-pursuit-of-cyberjustice-dancho-danchev-navigating-the-world-of-cyberthreats/

2. https://drive.google.com/file/d/1b6i3H5JG5UFMKMeEsRCBs7EPnsx0MTai/view?fbclid=IwAR09PJcLqRZk3dcPKGETdInJAx

uS4MpfatPPCedzdb3LWJF-rDBVPlQ3BgY

3. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjiToXMlh6PcBcVJFlIDzN3aivdgz7gz61uA8YgyVRtHU3I-

EWt-90U_zHQcpnXVsMOcJzpj2trfJ-3FbeJ3dBeTXc-P9sfVPYijvU
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1.1.3 My First Twitter Space on How I Tracked Down The Conti Ransomware Gang Using Real-Time OSINT (2023-10-03 02:17)

[1]

Dear blog readers,

Listen [2]here.

Enjoy.

1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjeP6okUkOY36J00JoKKRd_4lbaw_foucCMtHvzxm1xYG77F

j_AYKZDKsI-0OP21RrTtSgY2FGCPKuESTh0O0qvmG3vS2ddoGL2wf8

2. https://twitter.com/dancho_danchev/status/1707847083900723609

1.1.4 Me Participating in a Comparative Air Force Research Laboratory Information Directorate Technical Report on Botnets and Malware Detection (2023-10-03 02:17)

[1]
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Just came across [2]this.

Outstanding.

1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgYCeW7cR7G8fkMcJHiBzJSTYA0xcwxKvFGxX5gEOgmBEi1X

aGpv3B0gYzkz_JHx1Fvv96V1XsfY3MIKzEYd10OnK8PdLWCclDHVxT

2. https://apps.dtic.mil/sti/pdfs/ADA543919.pdf

1.1.5 Who Can Assist With My Wikipedia Article Draft Submission? (2023-10-03 02:17) Dear blog readers,

Who can assist with my Wikipedia Article Draft submission [1]here? Thanks. Much appreciated.

[2]

1. https://en.wikipedia.org/wiki/Draft:Dancho_Danchev
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2. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdHOe09fvbd3nmgUFePwCyOs9jH7YNTHPiDAtUm5Jtbga7q

N3poN_nNm56yA1P6h7yKHeOIbY95QDFbB3jXRHe2AnULVRgxa0Vk3N

1.1.6 Exposing

Bentley

and

Liam

From

The

Conti/Trickbot

Malware

Gang

(2023-10-07 02:24)

[1]

An image is worth a thousand video. A video (hxxp://youtube.com/watch?v=QwXs _GvsF7M) is worth less.

Sample photos include:
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[2]

[3]
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[4]

[5]
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[6]

[7]
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Also check out the following (hxxp://youtube.com/watch?v=eqBJVa89rXE).

Sample photos include:

[8]
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[9]

[10]
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[11]

Stay tuned!

1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgw6ORexeNxfPQx34F72GCM_RK8ieCtxiGFrte1cTpx2Ufqf

Doy0xpuLLF9OemqLseojH7CrbSsw-W5HuUg6Z4NlRo2krvxZ1sqIDY

2. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiz1HLmFFrcAxRUA1s436oOeD8wWB4wBee4cXeIxUE4Ekj2L

17kRkt1UIq9MLCowYLlNgf1DqAUTQjP3vygK2kwoQ4L8fLVwAt39UT

3. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHfAVFXVm74XOEZXOJW_3YaC-SjHY0Yo8Wv-T2K-a1BqEys

ZGlkrSGhzQqYN6Sm_qYP89CgH08s4D9UXYg5bt8TADwSubqaZW4Oq6

4. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNlYm4q35fgVr3a-y0vtDUM2XQxys8VWISMILGRXJcInbZe
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VBMUr0UUO7_A1zB8juxNYWCnPyW7ZRUOd2ZnFziJXSwH5WfX18-qRD

5. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggSqQqS2XBGkWnOrVKurZrQk_Wt_0AgCbxRPg3aanpeOYoI

tqI5uqNOc1DhHQuGURCtmREnhcXp3hFUf-I0eY-NvhHnYI1OCRIuJN

6. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPkMibKnnju3O7prGNSJVN_4UT3GOjM4jeeOM5Di3wMaWaf

sFESUyklSpfZJ3nnxmAaYJ_z2Y9E6k_WPQP4_ngV4vr1sgnL3cvbIW

7. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPD7QrvA133Zfr1FnvxSNxJqxIoEyP-XUzL4xvvFSKrvEUf

TXrmJ3DPUbU9JwdojgcSKerLvYQ-_CDNWeNTPJyevwd4eNvv3A8vHC

8. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9bK_4tQ-0g0i9DuMH19bTVPl3_tX0DvDbJcbNfJ1UPo5hR

c6ts56X6HmToFy0Hq12e-e9KHKSHc9wROKmjHj074C_BTn-QleTjhA

9. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivfdJRIU74ONlTg88fJDfL8ink9xrhqPZdqmxwm4Au4BJSy

Z235xV0T-iOliY7QxdPHJ29_dp3Xm74BazqnLd9qvC3jBLeQHCSwZZ

10.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOkAWULz_FDohbY3BPt65sqzyQppwVoKp6Q0wUcSvhtnU

MHS-JDDa6OBujvbpn7abVwhmbRplLqBTbPQp0Vwo8dgC4CIJpVcLiOtQ

11.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_ztaFXoaZZ0Ivlk9Tnn5Oq1_05-LYBsD9GPYxTaVjnRW

cozj2L85FxaqWng9F1HJtxR0B5ydyrJb4kCBExNuPf_eRod22QVimqiF

1.1.7 Yavor Kolev - Part Four (2023-10-13 19:34)

[1]
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Dear,

Don’t tell me you got money to buy clothes? Is this a suit? Go grab some decent clothes first to begin with then go home and kill yourself. But do it loudly in the toilet but before that take a big "your work stuff" so that when we come to visit you we can take a photo of you in all of your glory the "your work stuff" part.

Enjoy!

1. https://blogger.googleusercontent.com/img/a/AVvXsEhWyswRa8rRnWV5pOE0LomWjCpcA6Wdctt-ho94frocxEWkvx7Pkzssee

2SClR8zoF4gnFdQoWkKZHDxBTelX2WzArCBHMLIdGyydr4liVvA99B

1.1.8 Interrupting the Program to Showcase the BG Dishipts that Kidnapped Me!

(2023-10-16 20:13)

An image is worth a thousand words. Law Enforcement is also. These are the dipshits that kidnapped me. Period.

[1]
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1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7U7TjJu6hGsFr365fXQu_8-1c4BMTV5IQY_5_02arRIPqo

Si_8xGM8um9c3b9JpnB9xI0y0zK2o6oWK277FCgxv-i-RiIMFQ1Q83

2. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjtzYom2imPFDfCx0ClQrjH3crKIyD3IYf4Db1k8jSiwf-Gb

ZHfT0QOb5Al8mwsFwGKhdD0Enf0gK2txL_4uCQ8WGPioW6-3znjdfT

3. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjAJHH3J7R4UfixrGVEOBdju3L8uoAGUcMlZh0FSwrnQFISh

nGArYWVrXHKbVCzf5wzdsS44UclXUuRACOvWL8T7v_FQPTJnHt4k-O

4. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi7qcQVb5yqlgIkZOGGiUg2M-oweyWogGs1SrznS3ihWVyTs

Ah6BNFij8nok0UZaFbJUYfON_MfLnvS7ztgG661cpRCyiIPseSYms2

5. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgm7dewHcL86ju3gtC7QVxXwiQ4a0eUjN2pXxMQ2WSVdTYyw

ElLskO1qU-50KdiSZxbS8cTQwd2bKDTnw2GLPmHZW4cpXj5nBMMRl9

6. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5N_DVAHwAp0BSXYWNlcvB09T-d95ml6w3TEltRqAuT5UVG

Wnw84tRHt2-5-eF_9yyC2BV99dOsR6dwp_1dGa4-hSka13x4VRioAq

7. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgtduQWOcNVod8NSlgG8qrX_pQZYQ7wM4dcGEMeSRmfezmfP

fz8QW6e5nV7NTVCaJ4p3PaVTQLTB6_Rz8tCkpN2WHfzTCR1RuuIWzL

8. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmz58oB5VVegaQXY136kSiR1zVlifS-qNu0qp-PEYV1tK6Q
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OXuN0XV0WP1KzG_-jGM3Qs_6MRJcE6cwPoJaaE5-OLqjvMgiAVEbul

9. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7d4AK8L1vqve-xRfMeWVkYtO9Vzk7MUHGg8O4mBlatKxQ2

QIfOa17eGyNlsU2ovTJ6rR5toYVn0_6ODNJuXc0PJjrEUIT4bAHQdB

10.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikuL3JVBjtA-5WJEdKPGewu1FVLByx61QaBEoNUqWPlSx

JqlVaj_PmdACiV-1ArxoMG4vpZfvirSwj2Lhsxvehflgh4Pgwg4tcxCN

11.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8Q27U9emtGiuHnskIVg01pm4wQBs7Qzw3wxXyJxWZf2Z

qfbVF2x7elQcWhsICyGa3mOEXYMCfv0bn4CLfkd0ER3im7j3ixkpRM_D

12.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUOB6n18uCQ5UPi3pYYKFjavdffy4EPqf0wjabZfwpBxs

tOuMe0eTFEOUl1xr-qGqedxbIfpFfHbPsFaZSfn62ZF4V1ZAkJW27VQb

13.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgICnhMKjJYV-fKyLEMaiVln31WVcTZrDTZRNeah3SbzTi

nrH6Q0N6fvskyb2xkran5cwFyaYeahaawre6I-PuOsuVdKNj5Bgj4dKf

14.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgkbRJ38HRmrptCIk1DjaJfK1qEsHy0Uc9XY45B3oKlY2G

7oMPXL7Ua6FwWA6aNR-x1l73CaGEJwsSRiisoxXeyN5-Ur_eNidzkZJQ

15.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbMsIUtdd9g0zhueLl9xIMZrcwb3xOx2lfQmFA0ZuU0wP

mLUBYy5ZTT8v6MT8sUSPiZVUT4_MdTvQC7obajlxjXxY1DYYh-QJHhrH

16.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgD8PyTZ75is16tcgE0A7uTQ73PPeBLwENExTbX9AXhr9b

DH-emrFptWrk_Z90gAGtnOJxkyCbdWFnIDYpHpfvvE_nRANRtQbx-7d_

17.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPargIJmoU42-qswvaUM1IXqhl2nMsMDI2TX9Ds65t_F4

2xkiJr6UClxCYdVJkBudMr-OV2VirsVGnoPXEO-ycRLBQdbrZkL3LI2Q

18.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBZtoh6kAFwOcxvurMEIbM2wNhwqqrk_Dl8tkso7zNnX6

IHWr57nGWVQqLCEzhnENptHUE8naQu8J35Wiws53E10NUS7RvQ9rKLor

19.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlj2MM67m-p6FH04Ywdb5hkLSr7LkKCXlyhXvX5NhI1qR

FGvsFspEMrfpy5pqkk_Ct8JCrWXYIO9psoAyH9iVWx9vMhUutvMiHFtT

20. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjY3wQWl716huSudXLiw4z8dP9Xi4_Qh-asYS9LPPudwoN

MJcD2_cU4woKhgmeBilWjGuafwij2aERquxVHK5xANkJUJYo8y5WacdF

21. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEid3aMgr1zmUj1o8hq-fQ2h8iC-NrVfpK_mR-8ttDVyPHw

inxiytlmwnbfhmSPPBOfjexPmiWqC-cmdBpOUKdonw1kUhdTGhtIpowQ

22.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjF_m8r0_29pPPl0k0_ElQP6fm2tvHS8MoVQzRJIBH1eo9

jQPN5SgmU-zOjvj1a2yhJPmetyn2AEvPegraG9yVXsXjXyTCy6pQFe93

23. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUbQY1OAH6Uv8nk3khNsiuIec9-61ZGfG7vp1Dpzk_PtS

de70GQn5Ah7PQI02D580DWITqaULv0fD6woFxEw-AZUz32_Q1TRsk3ml

24.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUAfbI899XBRBVNEKEK6pUDtMBc7hQWF0U6Qaai8_bmME

ZUeZ1hD0bU3l6cmeFuZl9AXQ-8g2d5kR6raAkwe-wlKM9kIpcS4Hx3RL

25. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgy7Jxu__C6NsLfqZjkMwH3wJiQ-YMxwb4n0PcDlDs3RzX

FI-46kE8upo1tFH4fPe0CPqkQ9LoqRlhvYb-Qsd-D4dAEuhMiC4fk5k9

26.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDWxtTvBEgcw3Nbzn4FdDXKC_cT3tFn5LHycP7xeFjCiv

9VTx-EMtz3uXqDJUkN82HOSNhNIlB8KteM7XRDOeBAtO265W42DgzoQp

27. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-5iV0oCbHEiBU9dbX91eA16tUSphV_U8NlCvqn5T-Gih

KHByqk6Vz2G5TvboveyYqPQT111nY_qldeeRPpeiu7nFBPslZLuprofT

28. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-CTkwuqRJXofWY3pmItFi68Xnwnwhv3MXTtVDbBtbRMN

hwnJFAKDVb5Rk0VHZN4IrZ3Zu2TkpuVBJlq4oY1bH1Zay2nkDhmwHn79

29. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-Vm410wF-YO2lqtBFDlV43LYRbjJzdN7vldovmNq5NX4

LAF8CK3uavkFPCGnnt7F_XIX0RnlLvTOVSbNpyfBJCSeOaNI9bJdZ5ki

30. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHUgreKmwFHsykxf836Jl-oN3rwYU5JKIobzOfuM5RY-t

6CAVi-H2iqpSo4BTgZ1mkonlRCtSvjYpE57P5GKdWhBlkEmtlM5YZIYv

31.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiB559SsZWngMVSeSDrFpNvb7zdb7GETiilL6E2SfpmnxE

uxPfR_dL9ZJUD2LgwOl200qOnlAeej9XNxf8a0Xag97l_z67BMp-adim

32.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEil89gF7oqBRTiwwK52TOQCBWUZm79UBUItOndeUyS8kI0

46pWpPoRd043PfcKWFz2FAeAwGuBOH0D34Kq2G5CuHcTy6d1lEJWGm6V

33.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjoYHbn59CSVOWGBN4rFx9yzNLamIBLpsST7qRDur1fAOp
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hdqbpuINbT8q9mnUZmwsa4KhndAj71ppjAryhuwj0njRXyANIx2sO1z4

34.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEic6wf6_t7LJ2w4iFJPSl6hTWSBXIBc0IqROexSb26qe8Z

VfqVyqGZSnMB5e_DsFj1fr1o-UIxo4-U8BvNcmrXD862rzp3ln5eQygh

35. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi7l-5UtJy_5Zin0ezolpJtiHTD_dZli0H8gU6FCRc6NvU

zE3D6CWgNEDdIzi-bIN9bwzAOyRh3P7roYokQSReRQLuLUy1N1NX4YnT

36.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgpzJmDLV1T05eYXBBzGKUcitK_fUOExExXRoFA_RdW2Xk

COMrPu-kiHinfpqgDR-VQ_cpMa8mCyjjeT-XZiRAYHhh6k8FCVx4e11f

37.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjkojnUW0K1kyhmSR3K35LS8RLjaGK9zVMz_Zil0VsrsN

3geDQDC16vt9zvAq7xLvkn1WgMleBSX9-ixBwGrq1og37RlNy2gIcS2V

38. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-U8Xw2WTdokstfA9NkSCFEMUG1iwjvmE-A-z2mnzSej4

s59H2To-I2firY6YUo_ylaQpAa4s60R1lJQaIdgbuoJndp4ojs6eSkr_

39. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEisjnAIVcqkQPdG2D_2zcIPieTPqkM_YMtPITQQp-kj8Lz

8tOroaASlO4jVOGvouHF618kfMVay1EoVYYJEoO9RtuBJSxOOsPkEtCK

40.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOaqRJhKJslphqAR1GnYJGOrAy38NrdIOrZAek7L5oGco

hZagmtyvrz_8pw9d5nik8feVt45q7tI2tXMs5z13p3_-hGNQK9k4Jdml

41.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKFhW4NUW9IPP3fAveYCQfupSK3RKa54kBrpkL5l9kNcC

6Op7cM8Ef8oWWRL9YE0FxYZAATGLXCHhCsXa9DMMZsEPBdVpiSN9MKdw

42.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxiwXOvW2qqIjJ-4NJ4gSzrJDdZRDSCjnFOVVvEZvfr7X

VltwJBmB7zaq75_oBwYYgopbuTQBM70stwiPxLgxYJjKQhNH2CeJKdCm

1.1.9 Exposing North Korea’s IT Worker’s Eden Programming Solutions WMD-Funding IT Services and Solutions Franchise - An Overview (2023-10-22 20:24)

[1]

Jessus. [2]This [3]just [4]in and I think I "did it" and I might even apply fore the Rewards for Justice program second time in a row this time believe it or on North Korea’s WMD program in terms of tracking down North Korean IT workers that appear to have launched massive domain farms and are actively recruiting in the field of developers and IT workers to build mobile applications and web sites where the amount at least according to the U.S Government goes to fund their WMD program.

In this analysis which I did in less than two hours time I’ll expose the entire domain portfolio of North Korea’s IT workers that are busy franchising across the glove potentially funding North 55



Korea’s WMD program at least according to the U.S Government and will offer in-depth peek inside their Internet-connected infrastructure.

[5]

hxxp://edenprogram.com

eden201621@gmail.com

eden.company123@gmail.com

Team

Alex Banks

Anastasiia Belenok

Isaac Hunter

James Baker

Mark Rober

Mason Church

Tony Stewart

[6]
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[7]

[8]
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[9]
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[10]
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[11]
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[12]
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[13]
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[14]
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hxxp://github.com/Eden-programming

hxxp://github.com/tonyS2013

hxxp://github.com/mchurch21

hxxp://github.com/mark-rober21

hxxp://github.com/jbaker-git

hxxp://github.com/ishunter216

hxxp://github.com/Eden2016

hxxp://github.com/chris-bgit

hxxp://github.com/anastas-bel

hxxp://github.com/alexbgit80k

hxxp://dribbble.com/eden _software

hxxp://www.guru.com/freelancers/eden-programming-solutions Team
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Michael King

Nick Abbate

Tony Stewart

Claude Roberson

Tony Freeman

Dmitriy Anisimov

Samuel Agrebi

Ricardo Salazar

David Nash

Pedro Ortega

Stanislav Cherneha

hxxp://www.linkedin.com/in/michael-moore-682a51189

Sample photos include:

[15]

[16]
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[17]

[18]

66



Related domains known to have been involved in the campaign include: hxxp://kncw.or.kr/

hxxp://urbis.com.py/

hxxp://www.cijef.com/

hxxp://www.mcc-consulting.net/

hxxp://www.nanosoft.ae/

hxxp://www.nimble-apps.com/

hxxp://www.scarletsoftware.com/

hxxp://www.seglico.com/

hxxp://www.strate.ae/

hxxp://www.techsoftco.xyz/

67

hxxp://www.tekrazor.com/

hxxp://www.urbis.com.py/

hxxp://www.virtualwarein.com/

hxxp://advanzetech.com/

hxxp://akubohr.com/

hxxp://amsoftwarefactory.com/

hxxp://apncoders.com/

hxxp://avadhmicrosystem.in/

hxxp://bafv.suavilaser.es/

hxxp://blis4.co.nz/

hxxp://chamados.com.br/

hxxp://edenprogram.com/

hxxp://finnovion.com/

hxxp://ft3.group/

hxxp://fts77.ru/

hxxp://hasanitsolution.netlify.app/

hxxp://informatic.cl/

hxxp://letsoft.org/

hxxp://manin-hood.com/

hxxp://maps.google.com/

hxxp://mobicom.io/

hxxp://nanosoft.ae/

hxxp://opticosenriquehurtado.es/

hxxp://palmas.app/

hxxp://pbd.co.il/

hxxp://ponybelle.com/

hxxp://pro-codes.com/

hxxp://purpleqube.com/

hxxp://rlspencerroofing.com/

hxxp://springshare.com/

hxxp://support.google.com/

hxxp://template.wbs-dvp.pro/

hxxp://tiiastechsolutions.com/

hxxp://to-be-technology.fr/

hxxp://translate.google.com/
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hxxp://trivamwebsolutions.com/

hxxp://tsv.mots.go.th/

hxxp://vyzkumne-infrastruktury-test.vm.cesnet.cz/

hxxp://www.4dbuilds.co.uk/

hxxp://www.advanzetech.com/

hxxp://www.asset.org.uk/

hxxp://www.calco.dk/

hxxp://www.chamados.com.br/

hxxp://www.crm-masters.pl/

hxxp://www.cybernaptics.mu/

hxxp://www.daslos-studios.com/

hxxp://www.easypages.url.tw/

hxxp://www.emaildoctor.org/

hxxp://www.indiamart.com/

hxxp://www.informatic.cl/

hxxp://www.leoconcept.de/

hxxp://www.netsupportsoftware.cl/

hxxp://www.olbericsolutions.com/

hxxp://www.purpleqube.com/

hxxp://www.rfcvela.com/

hxxp://www.royalbrokerage.net/

hxxp://www.sims.com.br/

hxxp://www.toshalinfotech.com/

hxxp://www.valueworkx.com/

hxxp://www.waynesolutionsinc.com/

hxxp://www.zwimbaengineering.com/

Related personally identifiable email address accounts known to have been involved in the campaign include:

afahmy[.]pro-codes.com

henrique.lambert[.]hotmail.com

saint5121[.]yahoo.com

fastbone[.]fastmail.net

itdoonsolutions[.]gmail.com

meetchristopher[.]gmail.com

t.oriol[.]salesclic.com

asauma[.]tekrazor.com
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dev[.]nimble-apps.com

drshmk[.]msn.com

shuki4tal[.]gmail.com

t.oriol[.]nimble-apps.com

yoenis.pantoja[.]gmail.com

a.fahmy[.]windowslive.com

kncw[.]chol.com

asauma99[.]yahoo.com

ubiktime[.]gmail.com

t _oriol[.]yahoo.fr

trivamwebsolutions[.]gmail.com

afahmy[.]ymail.com

rodrigo.madrid.a[.]gmail.com

leogar07[.]gmail.com

caseraghi[.]gmail.com

Dinesh[.]INDIAMART.COM

amine.benabou[.]gmail.com

purplequbess[.]gmail.com

skiran.pulidindi[.]gmail.com

info[.]chinacapital.com

cassio[.]evolua.com.br

Related personally identifiable email address accounts known to have been involved in the campaign include:

careers[.]advanzetech.com

Global-HR[.]advanzetech.com

contact[.]advanzetech.com

info[.]akubohr.com

info[.]amsoftwarefactory.com

pathsoft-support[.]gmail.com

kottenator[.]gmail.com

avadhsoft[.]gmail.com

avadhmicrosystem[.]gmail.com

support[.]blis4.co.nz

suporte[.]chamados.com.br

hello[.]finnovion.com

support[.]finnovion.com
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info[.]fts77.ru

ventas[.]informatic.cl

info[.]manin-hood.com

optica[.]opticosenriquehurtado.es

info[.]ponybelle.com

a.fahmy[.]windowslive.com

hello[.]purpleqube.com

info[.]rlspencerroofing.com

sales[.]springshare.com

info[.]springshare.com

support[.]springshare.com

asxvmprobertest[.]gmail.com

info[.]infinitetiias.com

contact[.]to-be-technology.fr

info[.]urbis.com.py

web[.]vyzkumne-infrastruktury.cz

kontakt[.]calco.dk

info[.]demolink.org

mail[.]demolink.org

cijef[.]cijef.com

office[.]crm-masters.pl

info[.]daslos-studios.com

support[.]emaildoctor.org

sales[.]emaildoctor.org

info[.]seglico.com

contacto[.]mcc-cons.com

contacto[.]mcc-consulting.net

sales[.]nanosoft.ae

info[.]nanosoftengineers.com

info[.]nanosoft.sg

info[.]midcoKuwait.com

info[.]facilitazis.com

enquiry[.]nanosoft.ae

info[.]olbericsolutions.com

info[.]federacioncanariadevela.org
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Info[.]royalbrokerage.net

info[.]scarletsoftware.com

support[.]scarletsoftware.com

gabriel[.]seglico.com

contato[.]sims.com.br

corporate[.]strate.ae

job[.]strate.ae

privacy[.]strate.ae

sales[.]tekrazor.com

contactus[.]toshalinfotech.com

info[.]virtualwarein.com

contact[.]virtualwarein.com

customersuccess[.]waynesolutionsinc.com

support[.]waynesolutionsinc.com

privacy[.]demolink.org

duvida[.]chamados.com.br

comercial[.]chamados.com.br

problema[.]chamados.com.br

outros[.]chamados.com.br

dpo[.]evolua.com.br

suporte[.]evolua.com.br

info[.]maninhood.com

info[.]inetss.com

mail[.]demolimk.org

info[.]demolimk.org

privacy[.]springshare.com

jobs[.]springshare.com

Stay tuned!

1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNPYKa-8kDFYlPKTsxsnu1VbnAGcIdSg-xUDmmsbTDcez4t

03GSMNzkt-UsyTreQol-mCynw_Z4NqCAexwAUuEfAddpw6JQu4os6p

2.

https://www.justice.gov/opa/pr/justice-department-announces-court-authorized-action-disrupt-illicit-reve

nue-generation

3. https://www.justice.gov/media/1320156/dl?inline

4. https://www.justice.gov/media/1320146/dl?inline

5. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhsI3O4Q1hqp3Pvsmu7xJRrwEmf6dPfDAJg1fpk1ZrJ2OpRo

OEvMwQUoLVoejS7Ltva8Hp0KbgEzpJY5jdh1E9Au95K9gCjHze5DfO

6. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJW8uwv8Cv_74vaAVyLUmPhJVhVIMeTJIaAvIE_13lVuaaC

R6QWVZ-5_egHvjt8KR6wVx6ZbJxhj0qbT1v7Xybz-nwqz6P-_lBxhK

72





7. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvsh9jF9nLb6cWsb64EeM3Ar8Ka5g8dpfrOmXY0ZWfD_9gi

ePFrB6smwebU3lX3M3l6NRn9TqJqDMHBmu4HDJ2d9ITx2NTdQZTM0X

8. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhh0-q1iocUFe0NqDWjD5hKzHcfjjlCx3zV6Odg9L_B_Kp40

FLL9Id1xUnmCC2U0YpQgEP1FqwmkruHTZi5iWbl2PJPakAqnJS2E_6

9. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikWVmQDQiIf3gC0beHTRMIP1YQWtmXFN7FYDWrr_mTQnOPO

OCPF7s7EVrBh5d0qCwgYHi1abd-9lTzvvac6tAVEc7RxEg0JvxvGD4

10.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtS-Lv07hRmbj1goVf2t1asnjpkfagVc8lsEj0rER2lx5

6jB2wwnHpjudZHZlNghki_DoES1UYrE-2v9V-RBhROLryen9Y429wyxz

11.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgE_MIdHYy9DkNTlmHHsxQQOf2bs15faZaz0n9e_QHCrYN

Ku0ES9FocJmWiZBLY3XZMAYgDFlZ4zoZQwZyumTuiuBNnAtrLis_7NO6

12.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqAo0KxDlyia6fmcG94YYx7ED39Y8IPQnVReAyWJlvrMo

9G_Mv6PWrBzVJLaHeLB3HDFRAkJCVT4j0vg9UrxwiKXhvxrST9ExZA0M

13. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYEycIC2maPDiCqLLWLoM-ec3zLdl8IKuCkzUOgSmZ-1e

AdtMi71GYeVv6siq9SRfkGm1etfSjSeHdtVgKht4-Rg8XFSnCo3ZAIE5

14.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjWwP26NOr4ZETRoDqQ4_Ia6cMhllbUM_wowxTHkFPBCl

5m71UYmmYuN3iX_OnJlvKIjEZwxZSeXnn3t79p4gBCvVkxEEylaOJwV6

15.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEJ9pvGljNWLBRwEElemV_RwkbIxQmRW_yb5svP6oQNQN

cqUAFwEQDHp3eFlZZZcfONP3iMHX0xJ6U16DJD26j3mKs8OPxZq5EnUp

16.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhbqB1WkzEZenol19CGGAPwWSeTJAy_JDSW562tf2CYN-k

7O2nl8yElc_a5p8hEVr44mzrLXq6buoYx2LYQeUx7Y6-qHftmULzi3Ez

17.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6Z_ZrWu2iQ8zZ_MafjHyhosR8a3acemelT33UsgYaCZy

-5Fbeq39hTcvhD-Bu3TExu3wROPKdC3xvOKivPmj5m7RKnJv7U_mG-j4

18. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-nmDNBtVdak5ZaDpm-GBCXddlLFpEatuZ9a6JtWNkLup

vYQnk25Gv0SfWb4_VVE892MwzNDpu2CdyPmO9aidurccWz08vsOG5kr-

1.2 November

1.2.1 Where Is Anton Nikolaevich Korotchenko (Антон Николаевич Коротченко) Also Known as Koobface Botnet Master KrotReal? - Part Two (2023-11-09 01:07)

[1]

73



Jessus. Just came across this and I decided to elaborate. It’s 2012 and no one is fighting

[2]Koobface. It’s just me doing research with success at the time.

If an image is worth a thousand words then check out some of the most recent publicly acces-sible photos of Anton Nikolaevich Korotchenko also known as Koobface botnet master KrotReal including some sample maps of his latest visits across the globe including possibly the fact that he’s visited the United States which is quite a news taking into consideration his online activities counting the total number of cities that he has visited internationally up to 65.

Sample photos include:

[3]
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[4]

[5]
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[6]
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[7]

[8]

[9]
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[10]

Stay tuned!

1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgngXEG5vkeIHZjEIMiqiuL4fnKoZG-3AhScRATitYuW36dh

k2G18fQti4JhJ94V8xCTmEAJ1_jPOwvsPJq-SIz52mufPURgvUBy2v
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2. https://ddanchev.blogspot.com/search/label/Koobface

3. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1pKT4MAOh37BpiNx68upUZ3j9VDOte8hoWcNvUXUYPni5c

SI15DZUZAe4VnbtcIMtatqUKcJPz029JkjLpA4cYdf2yyTfyFILVgK

4. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEit2eROfbnLLRAiFejbM6URWLYH3UE9hb9K44u2eg8umSxZx

MhRsijjb_Tu96EqOcBKQys47ntGy7nP2XiP24AAFZs5zryeuVa4xnL

5. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgyB_Rciz1Cp3WAy7EbqKYDD15iwAuqoz48beSto9DIQBYkX

2ijGOJRZ21tp6X_-p3n2dPW2GtACxszNgukE56qBKmJiHUaU3Roj-Z

6. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgc4xv8pNcuBDJ_-azqsDKHdOBRhhk58WDLbiL-tDcl92hxE

i8Hxfy04ouIzh2WqatxkClMXh3gw2_A-GtLf0z9k6T9FPPpg4D-pIL

7. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1w9IzT19bYaimTyuhO6pOJe0VNy-F9HW7CAbLAsivmqkfW

_hqtTOlRo93bCUT9cozbkyBSY0aZ5MAp926KvEj1rYpgpbXor2-x_v

8. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjiqDMNwOtzBNih5ndfPI_pWdEaiHdogfeXEBA7hG1t7U9O

P5ig8MmbllWyMz7R6w9DglBcVLsm09fVUH5ls7aK4KJ5h3-mZLToS8

9. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFSWJ1JBtz_-jQyoWk7hc_KcFY_pWgbgQQUtklPD30NXKbD

Ezb1afSnqDLjjBLTWb1c7tPCxK4RamKZMkRFUMTvC1tvnev2lAzmQT

10.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzHBfqfniW_ggk_N1XDKAVLtAOe1ZsBn58J0_47EGnghK

9uf9w4lHgadUGuIOOKv6cKT9tupT2o0yprrAFPROQ1fhb9gmJOc4HL0L

1.2.2 The Conti Ransomware Gang (2023-11-14 19:37)

[1]
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An image is worth a thousand words. Video and related images courtesy of the Conti Ransomware Gang is worth more. Go through my original research [2]here and my Conti Ransomware Gang compilation [3]here.

Sample photos:

[4]

[5]
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[6]

[7]

[8]

[9]

[10]

[11]

[12]
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[13]

[14]

[15]

[16]
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[17]

[18]

[19]

Sample videos:
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Stay tuned!

1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhd00pFbAmL1NzAA5Yjt2HKRD79XdqsDtezOgrw6dlKous6s

X6lH2NeFiZ9FHjAa2e0qGXJTdUJR6ke5Pt8Z7YAMWF0BItUp4jite2

2. https://ddanchev.blogspot.com/search/label/Conti

3. https://archive.org/details/rewards-for-justice-01

4. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg_yVBiuEnYbAElJ6FwY0T0w3MQ3j89yS-BSM2jLLLumG8qs

cLvBGvEK_IP2qbpeJvOCaujMywWMcNZH-Tm0H2jGjuWkW05GD6HxtL

5. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTkn7Rax27zL47t-ST9ob03IzCNLW0bgCnpAvwsXo5TGhe2

IG81_mNTeAejr4nCG596wVpe1JVBVAOJ29Fv00VZnhLprcjvL99L3q

6. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiYjnB07fOSYx-Ktc-d3BG-nCZU6mdVa5QcCEI08IYYE63uA

xY_gXL4K-8UMnOs3i2S8D3YOCv8qGSR7J5tHTstVFyymBM2ye2GL7w

7. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh0ERWSkUyRlLz4y5mssAwlKY9R3AodhG1ypL7FAaypEBe72

KnzdDyH6_RI6GXt-koNqRJAXwtoNe30GXIaw5TiVszGFIjWQLoqG7v

8. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEirD-0Roxrrr2TinnxWIsstQuZ-fn9biXrJUNGb-jOqEDedZ

VhD1mC_9hsFuVuNCdrOUv95G3diW6emQCcLtxcAUvbtituf-1T4TNK

9. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMW9k3uOU6QcFUTeQ8mS5nBBWJ-9hjGdiK7v33SYuh5CknK

7T00_X_23d1ZWTd0lOHQ3wE0mlFhTjl4LJ4h-pMaX54I-3jF7BxcmE

10.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEza65Q0X1oUZW5Azg3RqrpVc3uATzOfMNIPniGfySRbu

ar3Ri0fhH9NYWm1oPqiRTdMEfn_1CdYg2K8t-PNbW67nfcwNcoWpyBID

11. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhikmweRmDDVsAB7Z-fbfhfZpvuLdFD5j6zWEtCKeQsE-T

mjBhDqzWAfrKog-fohHdMLcmZcrnDgDqefnamyAPXVPxVNOwcGpRrKx9

12.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjL7PXsvydfL7aKf6xYvIDP72Bq90N8t7rZrwE3eA6MgoA

SCzpj7R0ULedmxJcgriL4YctrShVIYyMUEJmv12WFCfUH39IaxmWdDEr

13.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHioBsUNVIibJsapHPJw_DgY26sUU-jpFU_bEEISI72OB

82gx-BbjVCHiKm6QZZvTMrG0bCxhKMTRki7cEFxOsb-DHmgoTRIVy5iv

14. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhok28orIFEbqXKPSV-k7VYALrG8-TSgtrYQJpl6xZm1Er

3Pym_8IyaW3TJfD8rhGBUgNKJefEjZh4w60uwM5PmTaKOqyKACPAuB8Z

15.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgtiU_ylpNq5L7eg2wNag9HjHXkVAUC3tdNkjqY5RuQr8l

QMxAk1TwNUBkIheCvXIy7tZUhAiVhbz2fAqg3dK2sMCDIJBqJCXtfBbP

16.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjg4L8-lB1qReWMGGOOXnzPKo7qOGP2Oy7sr4WGcQEXGlb
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x0sqiCRrQ_wdzBNUB3DS4kByromRaMCwBTSJ9XlrqYH9VUxFs7YT-YKS

17.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDGGkfmlqIJcP9DPRNyoLrZs2kEEY60l_HBXV7ItJXzwE

7-D7y-jdy2tvaPnoFLPBIBHcNi_gm-vUMx-gk0MLS0YiTMaPGET0ynG3

18. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiK-qEA9HE8j2-uhOAIu8MDR-yrpdk6G4AkM6ktHVhwGb6

px1Qp3Gh6u2LqQEkrB0hGNhh5SI92fzJ7FIvhIsdJogwZcap67XwOxuM

19.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhoNIXhc8H2PvBGX51JMs3aQcBemlIz6Xe4MANQ0vWdSsl

iINhXixr2nucshjn9GWq2cMz-39xENgEjXEhYM-u58CFkPInfB2jEwwg

1.2.3 The Conti Ransomware Gang - Videos - Part Two (2023-11-16 19:53) An image is worth a thousand words. Videos courtesy of the [1]Conti Ransomware gang are worth [2]more. Check out the following including my Conti Ransomware Gang research compilation [3]here.

Sample videos:
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Stay tuned!

1. https://ddanchev.blogspot.com/search/label/Conti

2. https://ddanchev.blogspot.com/search/label/Trickbot

3. https://archive.org/details/rewards-for-justice-01

1.2.4 Interrupting the Program to Showcase the BG Dishipts that Kidnapped Me! -

Part Two (2023-11-24 04:49)

[1]

[2]
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An image is worth a thousand words.

Sample photos:

[3]
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Sample Facebook accounts:

https://www.facebook.com/profile.php?id=100005932519460 - Павлин Георгиев

https://www.facebook.com/profile.php?id=100030506870037 - Васил Гачевски

Stay tuned!

1. https://ddanchev.blogspot.com/search/label/Bulgaria

2. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgX3yq3B7O2XtI780kce1Y4oFIUcWAIhk6DjaN7opmk2cmh2

TR2Oo_zGut2jhiDTHIJJGFx8MHNNJ8MsBNQqjxzTwOmH88bEEFu75-

3. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgaAqYZ3GdBT5uy8g6aKQL8kl9G3g4Eqru6-cUoFRaQ2c6-w

-A38V-CcT7qr4U_vr2fHabWTcnKwvqUHSGYKCHF26kb9L6tv07bPMN

4. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBDEM6F2Xs7LocSzAfsZrj7Ps5dVmbcCYnCZQFs_TOGIJMn

tHndEL9qvwTH_5nTF1A4ckRD-shrnNt9Sz3Dvaz_bgtH7EEoDmFKSN

5. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXjYw5WpDO3r6uVAXDHlJ8RPbCcaOTiGQBW2d0Lg-gDhcD5

vSptLcC22NyERTUj3TPmA2YMyEjs2LG2yv-jn5haP5fk19cCt8e1De

1.2.5 Earning4u Pay Per Install Affiliate Network (2023-11-24 12:13) An image is worth a thousand words.

[1]
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[2]
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[3]
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[4]

[5]
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[6]
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[7]
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1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWoGJGZAmVLG4S04mm3vod3jTuFRdw0PwO_C1LcszJDKOGM

OqnATMMVLV7lcut8VIsWsQrUVr1Tr3l1YouXTQ2lC0Us_e_9ro6fSt

2. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjs75UnTy3PydlmgvDk66TJdfdk7d8Fct7JHahfSrvfsJbuw

3hMHENHXp3Tj5h9j3Tk6EWVDjqO8fU1kwXUsnvq0O8NpaYBIxQ36xZ

3. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjCLl8HP-ZIBJMHfJI_Vloz81iHRe0Rxc6vqgKMAG7FfezcK

2fOEvhUJxeef5nljuAGm4tfEgfSRX6h3Qm1JbQ7fCRpGUI-r-_W3om

4. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_sjqJOPLAHz8JIv94OVaXqHKQ7fxemCx5vwXAe7_s0Tqaz

uwr3tpidFYmVXuMFV_8aa5f2_SrAdjn8JIbWsBKn91fYTzIaNsFNOo

5. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEKhSQRHinxcsscW4satYdzOEAv-Dx2tKhoiHp1W7_yM7Bd

pLda_oNBnkB0RaR1frgvKcn52vbgBBlVS1NYMcFH3D5gqGbjvV9KO-

6. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhS42EQFXIj_CZQrfwcYIhqu0dciBSfmcnlsbkiVy3tjbZD0

2NR9o7pG4CKzSbFrD_1KwAdOlc7fLFT4uaZAV1ey8BiqpqDYSUnfUZ

7. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi8DgBpniy64ZZDUBZZuA-daKO-zbT5GrJ9lUft6Rw2_O8Xi

qXBU8ng5Ub0NHAuaIB3E4-Coh5owjjMq96RIcntqPRMgW_SoVfmgK4

1.2.6 Chimera Botnet (2023-11-24 12:14)

An image is worth a thousand words.

[1]
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[2]

[3]
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1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgkrVzd-5m7cJOJJqjEDpEQxPbyUUGyfs5hnQz3nbRx2r86q

GXu30TzO2cQhpsLvAM91h2VqI98xKIcW09D7pUR97Hz6GRsBxI0Tyh

2. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlXGioXZ4qfOGv4Sk4SI4QwQ5NiQVdY0X8LJDXGC4AEmT5D

YQeJXGkKXJnHCyTnFoFxNyzUooxeTK5A6W1oT79Vk7lnGgSzUODDq4

3. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZgQa33_2YPEoNCGLkfrEVr9-UIV5ggk5gKgNjREvFvFExw

YTAOF1iccwzP_IQGRjcB58yI8Th97qQkR6C633OfKscTYRePNPljDf

1.2.7 Innovative Marketing Scareware Distributor (2023-11-24 12:14) An image is worth a thousand words.

[1]
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[2]

[3]
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[4]

[5]
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[6]

1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_LZTQ4FnxmDH0gTwbJ6r7kOWNsktOY-06QgX79NdD-ZGHI

2PmJE-3BKKPj3ZV3WB55mgMIY-yKnxWuqyMcNd8_BKSWHmT3WymIpj

2. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgH2FFuYqfJEyiTF_3W8zb8om9TqMCdvIDwJOYgpRVKvtH9L

NWsnXukd7o_OMBXgYAsleuFuUJwnm4ZvdoWDkr8vahvwoWSM0jvL20

3. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-XBsAFFNydjzoiC6b-p1CXKp3MNfpjutbFh5qpbeAVajyw

bhY8SR8hp5SDO_mnTddxeA3_gvkf38Z_Nw7iapgahTwzM08eia8n_s

4. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIMaVq-Pc6uNBF_jZOPFG0HhQr5kJ1l487cCElE-bM7bojH

3amLCBc63aa2rF7ea0u8Iio-GP8V358W8OS1xLD29PK3R_aSlFvkS0

5. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhU03qi80QU2qHA6Q_LdgebjRXKQKtA6vYYoooMr92zVXrP_

lenBWcWNkP6Fj2OVE7xwx1oSCS1UDsW_pOrhJTPxQwIyXUJXQuJEpd

6. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmWsH4Bc925Dc4-0fnXm3jDuQBCZ9ti5CJIp7ZnYGk9eWf9

9604ZT_kXIQlbN1bBbRKNHMin2qz57qTLKmQ1m93cYAR_8N9Oq9sp1

1.2.8 China vs Iran Hacktivism Campaign (2023-11-24 12:14) An image is worth a thousand words.

[1]

104



[2]

105



[3]

106





[4]

[5]

107





[6]

[7]

108





[8]

[9]

109



[10]

110





[11]

[12]
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[13]
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[14]

1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjG0pOjPKaOfr9OG7xGB6MVHTRgq2GeZwIJdyf-mFixliKLh

u9cFroepTeXWMNxZtNiZCZ41ybSiZq1jkOZxu59QgPoJM73LC6Gf4q

2. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEBXHxq4fF0nxle0GMA_-J3ZYi9DJTSBqg5CQRtuleOsw0T
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FPxL_T_nhyphenhyphenzKDcVaIcSgSahx0MiV_h26PIqj0MHpmXW6

3. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8tJgbHt3dPZ-wfGeiZkNSv2JqrHBkYrE939FFp1MRtSHwd

Xma8vzWLaXvhKvyfQp8j9aw7QwWvCPKbffQlCe4YvWE6LFEjgn9Eq9

4. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjOh6dipZ-wclE8yH_rL1ihTl-Aa56iqvpDN91282LoZa5ZH

UxlpSzkopBrbQkhpqdhq9ztvUNSNLfi3QofsEkkNrbqtPdCi8oEYbs

5. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgkiN5xyb3OGo6NErpkXWEXILyEcZ5KEMdCTXMtmQPRzzkes

FHVtO8ZiZXBpDKGP_1aWf1MYVN9OWHsOZnQuzV3w1l2vPpnEN5Saa2

6. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhCPVI8mcoduNWAy0GnJlmrK7IbOWCnTPle6udKGUvrR8Ki_

CC-KeebRVmTDxV6LG5L6-gO6WtwXzgdtTW29gE_Vs0xkkVawC-NjLt

7. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg0S-TQC3hDpknx0rqlfYb5aY78rsbQHUiRpQqZYM1xoHYou

yAf1YNcLSo35o1UAsPLORFxVnvovpv0MdrqoP0SDdRt1PdgcTPtymJ

8. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjxXnW3rv0ejverE2RiNUtra6G25QI94tv8fsqwKJOqNfuV

i3D3m3N0NS4NG5t6rZXIXtCrqu3KLiDb38QE6IKVdRtnOL1oTf7aX3

9. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi61MqENhOdrJy62xiCJFSG3uG8jqxvrCfd2ZGtk07uTSK9Q

LCrtZZVmwxwddyUYrhveZ7bVxxTljDNCpLMbP0c2TxsWaEFIZFSEI3

10.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMbaA5TYYsfiMT9haecDtCVrvdarl1qvR1eMjIjG6nyti

IiqUNklxOGV0h6rYeX2QuVglimDAdE7hE0kXEeRCF9-tc-1A51DsC16K

11. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDVJyB-s4L2gdjUVjZQjjiEXj-6zTfHqh6HbNv_m99lat

QCAoxG2NOlYXBJ2KYQP95MK2c3SXBzomHfBTjjm6AGMWzHBFRXiHN9EW

12.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhco_Ddb_cvIQ-GBeltE7PXzex24_Me8YNqAF7tA21_eQh

Zvg1BV7Q-Up2oByE68Iyvx1c5a0hyphenhyphenLGzkedfEMgnm7IlIK

13.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh26FbQizitYXvL1nHWD4F0rCgG2iqmPe3RY-5P2z3sy5R

uP9r_4FnGTTYweKoTdfjcshgjSQuu49IepC7YudbliEapwJERIiKs89d

14.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjONW4XFPno6NAcXu2QnI3PalUqse7vekdGFrX8on6GNco

X_4Ryxf8fHyGFiQ8pwMnbJzu2Flc8vrkRK6r930DglQHTJVby0D3GS25

1.2.9 CAPTCHA Breaking As A Service (2023-11-24 12:14)

An image is worth a thousand words.

[1]
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1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEho7S4djPl3F0xla8PRzZHbQ9Y4x2Ue9vtYQCvz7MLsA5l7_

1-EJn125Ri3Hq8sqYJNJSFV0mcro1Rke9d_PVF_zxaEVz6kuwiZOZM

2. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivqrE8IXJFHHb6yu0Ult3D9UCew0m9UKpKcovZW2qkH2JN1

zUs0ubELM0LocTqhe19gW4Zw0x_XIxiK_CLa2BTxLxshRf00lk6uYK

3. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXZ6Q7KQETw3o6Bkc9pVEUugG3uDQ8CCt0H5LOfQbA7lR9x

eL0PzAEV_2zgANMQL6UDN9GTsM0x7MXU85f31lC5FJJxyjt1knIRsw

4. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBa4u62q6EiIBl-BdK22ImK3__qe_SF65yKPbVKEWh23aec

WYpc2K78l6hNZx3pg4dgXWKDRG1zRYFaUvFgiX7oWEPgpja9bICSnT

5. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEOEb-PuNrxK_Kg5qIhpRDyBTvh5d8yzuETZpkhMfwoBjdi

lgcxCt3_tQGVI888AsBaS5jVx5fA_oQxBbgSwKPJL0i6JnwMNa158J

1.2.10 Carder.su

Cybercrime

Friendly

Forum

Community

Compromised

(2023-11-24 12:14)

An image is worth a thousand words.

[1]
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[2]

[3]
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[4]

[5]
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[6]

[7]
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[8]
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1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjN_V8BZDZ9v_k2HLTjxTJloihDGqoMoNfDb60x2uLh1CjP1

aL0sOtJnvVxWvcUlRkCSt2gfxlDsOVR69J3wgbKjIu4m_IfCtfOD_z

2. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwCC-HIARGKKDNZiYmhq6-1ICu_1fb6bX2Ha4gJcdGvJZQ9

uWqJ0yuyeuS7MPnJLR3AJJ676sC-g-cjdR0o-9vd_POgYBd6AbtoV6

3. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEizqyMbMZ7amXx3msX0LWVpKQmpdlQKb8JbsZ5LOJaI2BbQH

jnhOr97batR29umMazL1pr9CwCgCucDzso7-6JjuPK9pJ44rjkSQq4

4. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiXudR3wlSQcQD_ys7Q0QIf56tUXd9OzCsXEsRbju4M87d77

CcT_szQTnrbgReF0J7x7kRBtYSclPp9-A0J1xaEiAGuB0EcsgfQ9Fp

5. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSJuNcVdM3FQE5_h7iaPIk_SG1D8LOiN0fXjVJ9JkAYfKOa

9yhkJ3jWCa7vaqTREiVqzqFhc5RKCOcXOmshsEyvO1e46HCf7WHE9c

6. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhx82KIGXP-wz4EwISdeKvhsEf0YSPKbduaqBBjSH88eMtx8

8mzqyI9Vmm4OnFTMZpZh6NKnWuGq-S_9M3V-pGsP-SIY6PWagbVl7C

7. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxMtS4oNRPyMTCkNMG-d6m5dXaipnxcrbMy-VLvR1MH2JBn

tH87d3Z8bS07EwufIw4USB_WlyDg1RFNhkoye7Hm1vcCpC_UD1MeQ3

8. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsSKKnEswJ8iJsQv8G7-LcZuKJewO2RVffdM6T7YQBd9M8h

4iQilEv-5htfuw_GDzZI0w_f9QirdV9wLoGC40hUOTjxyWnVSftK55

9. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPaoHpK6csSI0iABgLQO-KnUDeL69MFXwC1YhbNv_Dfj6DH

tsucbHIzGyq4EUYpsGfZnJnUgLlUnrBjH_8P5dGD07FYuN40fNiKPA

1.2.11 Mod Bot v1.1 Malicious Software (2023-11-24 12:14) An image is worth a thousand words.
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1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYjv-PSynomq_ue6awyUTUpzpBsG3DDh7HwBSAJU5I2lWt3

QEdAlq4qw2qyYXg5D6Zs7c5Z5Rnr8Plv6GpsNQRFOq_IjpBRbfOVY-

2. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgkQENN7iLBIXC_d11UMv64G_GSHtcOYuBygOCf2sC_Z_zi-

ckC0h36F3oOOSl8QWfLB74oqG34dOtmb0NH8fFXCaTZ9gr27OxfkUi

3. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgSceJEJCzQ0JT8zHLTRZo3gigcEQUp9RDLw_KfgdV0HLzud

0cucHI61-6fdetSqRCXO7sGju4GxoMCupSO8cf7OUbmwooAtikXDvM

1.2.12 Hybrid Remote Administration System Malicious Software (2023-11-24 12:14) An image is worth a thousand words.

[1]

[2]

125





[3]

[4]

[5]

[6]

126





[7]
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[13]

[14]

1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXG0LAHM1OKX_ASockqTuygj1apYKB83JzIL03rAwTpV9FM

1GChe3SZaas-B7_p7fRDp5hgrHS3N6oEXAGqqbd7mexv34yh7kB-yJ

2. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgYpWLHR20jC7VY9evBYHyFBlFgGl2j6Ao-aqTsgF0j0mt0I

j6-4Gsw8npLsV5eAR8Yzljl3wDmQUBD3zTuVveXbvxHrsa5ES4s2tm

3. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBk3isu2CeWibAkP6MBkZQO1hT71z0LgvLyx7zx1MdCJPEZ

ZkK5feq6UVYkldoJx38gc66RUtnXVSnZ0-R5HkR_xyVkT9p7XkbBl9

4. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgro9_du8SgFaPw_qNQz_WJasAZ2Y63bvobj3BtLSCpRVVhG

F4Gh2wsmxinObgp9rO6BY9Kd-4HF-caBWJOwlB4zKelQyZ1egYYz9F

5. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgV6IxGG3AonyNwFKf8gKjLNkD_BYVrY36_ML8Ptmoaibq1n

Ouwzm9bwOuprsvPD3OyBfKQshBHHMfaCF8TztWxuU0gnIfViIXfHUD

6. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCBuXxE_ZNSwtDRML2SW3Ihl5GgO7XfHn7QisGBKKOUk76S

uRMWP1K6TBEr2RZf83_1p0VEys24Di61WB2H6RcEgIhyphenhyphen

7. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSjGVJZ70qawDx_2ilzX4O4CC-a9BNriqaTU6tccVh7tPBk

0IBCJhFAbfdnGj_2G6o3WhxZ3bnjGgbmEzO45B6ft2sO3qgK23Gb8d

8. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhj-BarBhz1u0On1FOd83qzQg0-Ps0Qp5i4CrrlolkffU0Y1

aK_K660NXQ1QP8AowbPMEb8jD_se9wk7MZkPClXEHpiivLPLe1rTP5

9. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhpKGFiwHn_NeJUQYPVnL1QKdh_sY5w3JXKoliNnStF1NVjU

JpJisjBv6OC6OUzIuZ9Zibg8CYyGR8r-gtD4BUYCiJkXjnKfg_hxzx

10.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5XcKPAW6NIrck0V6bibz8Npq0CsObGrNFDXJRNTuyrdx

QOyuV6oUypyNB6ZUCDRQqRjK7YqomXEPVaNS5QURWVozsqUx-6qcBvT6

11.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgVZXWtZKhKbQgj4BmKYoK2eg6TVdmqMY3NBJiy_O9GwfP

eetUr8-bcKmHnvv7JfRli_33ANeaWE-L_qTTi6kkmc95foVDbwu81R7f

12.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUsw7KFrjIcGKMOoJSHqtU2sASInAhcUKXZ6hebf8U-gn

uBboXRhJtU5p9jNqKojAUq1P2CV4rkxRMorkg79veZ_42MRRn5SkqiIa

13.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_TjQDMhyphenhyphen6KleRmW0jzyAiQEpIcPpqUjzzb

ZGoPHjU37GlOPphA9RsDFANzJxTDhlGmYlbdrYa5gt6lYVpMNnon2P8t
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14.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjx5HYbUFLsgZn4gAc0wnirzVcj7yKx5epDTGr5crrgfe_

xxU4pc41MvUqiTNF7l-xhZE8TOAeFxfv6_Oby5WjfgG0JiIqK8EW5eEw

1.2.13 Rogue Google AdSense Campaign (2023-11-24 12:15) An image is worth a thousand words.
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1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhK2XghCnIjCmeHp0B1EKWfb1lTYOdj4u47ickGvzqJ5UiZw

qhXC2zzeWWRxqqIShTPnFfV-R9oZnISOvmT4-hM6_JVtIEX0VCZgsh

2. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqBb9HF9kJ2-ujRlOMGyOvpnZ2pAN87nJQl6w8ndt7WNxfo

y_n11QiR831qF5oMg9fTRmfSCsEQvKj0PNw_ZYx8TXp4QiIV-FbePv

1.2.14 SQL Injection Attack Campaign (2023-11-24 12:15) An image is worth a thousand words.

[1]
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1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgS_hvJS-J_x-RlromAx4ir3Nq8V4ayRzie45mp4Jo6qVoSc

xDk5aPpSIId0jh-GFmG7Z2sPExJI5h_S1jy_d-9XaO1EZlKKsll0Ot

1.2.15 Managed Spam Service (2023-11-24 12:15)

An image is worth a thousand words.

[1]
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1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj-f3U7Fa5xKTrUs-vdGx6n3msoNmblnyfz1cl_oLw7rJX4d

jUgX31P7zeGCmqpXNpGVROgMX3RX1tcOKY-lwvFXG57B888hfr1KzR

1.2.16 EyeWonder iFrame Injection Attack Campaign (2023-11-24 12:15) An image is worth a thousand words.

[1]
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1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqnnq0ZAxdlj7OZiQpkYJTW5mPIiIlNu08nlG8Rsg1AyruH

SkJxkZIH8uqhUXyLKhzCEdE87F_OglAK88ZejytbuYrq8BMDChQZed

1.2.17 Web Malware Exploitation Kit (2023-11-24 12:15)

An image is worth a thousand words.

[1]
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1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4uml3ddjj7__BkpIRXmzX7pP9_bB2mwmwUXfy-GyMJGEhV

-gxzpDZAztNTituKlDWxtDDL0ykcaZVGkmEJvqALZX9nNS8pqjUD81

1.2.18 SQL Injection Attack Campaign (2023-11-24 12:15) An image is worth a thousand words.

[1]
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1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWosPF8ASKykf_B1LGkhbJ_ZpvHa2rp_kL_hhx38iTb099T

mcuBD5CrBFDdEOxeVQTZM9GinevDXoGphjV8rhW_mbRv_hTR7ulItK

1.2.19 Blackhat SEO Campaign (2023-11-24 12:15)

An image is worth a thousand words.
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[1]
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1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhldKzQkA2Hf_OccyUWStHRgs-isospB_fo3dYF5gKIEBaDo

SA6YA2eh2lSUbChoGuFfIpUQaqs3jUfEgWVuoZ7TIqxwsc24vUB-vW

1.2.20 SQL Injection Attack Campaign (2023-11-24 12:15) An image is worth a thousand words.

[1]

[2]
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[3]

1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhcac-zlDn55a3YQhDJ848xtZnNirZHKIHScunUFnjcCn15l

UFC4QjN1OrBnP8DYwxEj8ggFhZh0Du-KMcpJqsyGevD5swiQR001kf

2. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEIQQkVICkP0zxuLW3wXn0fQmXseDpDeXBr63ku51dZiyik

mKpOGVHXd8vBn7bvudjcVgOGEXUR5OYL6LkRMCCpk9Kk8VPTG54T2Y

3. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3ZsmlRFJmG3QHVTIXhuDHWaJOSF4qxdtwoYVrBdcV6-jK4

ykYcisKqJdPQFvXnGGZDiaHfzwUKIoBQMTfSKMCb5l7KxpVpAUNqGm

1.2.21 Compromised CPanel Offered for Sale (2023-11-24 12:16) An image is worth a thousand words.

[1]
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1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjROJHUE-WtPHga1wi_fAnON2y77sHHrkWPmnQpRs7ZtvbFW

oZZ1b6M7ogtC8kaYo45I9dBk4gdGir5nOmDtCnZoV4uRmME8r83SLA

1.2.22 Image Spam Generating Tool (2023-11-24 12:16)

An image is worth a thousand words.

[1]
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1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKRZC1JNQnfMVRFVMueiQLzZhe6x_iWmzafmVwL4GpCju7d

FHYQoZ81IUvBcJdFHFVbRXZL-J9iRWGgcbH9ikovfRtTO_0Jks_XxV

1.2.23 Crowdsourced Iran DDoS Attack Campaign (2023-11-24 12:16) An image is worth a thousand words.
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1.2.24 Dancho Danchev’s Videos (2023-11-27 20:26)

Dear blog readers,

Find below some [1]videos courtesy of [2]me and stay tuned for more.

143





144





145





146





147





148





Stay tuned!

1. https://youtube.com/@danchodanchev8774?si=7eCvebw3n9NHeHse

2. https://youtube.com/@ddanchev?feature=shared

1.3 December

1.3.1 Email Address Accounts Known To Belong To Owners of E-Shops for Stolen Credit Card Details (2023-12-01 14:14)

[1]
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The following are personally identifiable email address accounts including domains known to belong to owners of E-Shops for stolen credit card data.

Sample domains involved include:

ccmall.cc

track2.name

trackstore.su

magic-numbers.cc

allfresh.us

freshstock.biz

bulba.cc

approven.su

cv2shop.com
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vzone.tc

ccStore.ru

dumps.cc

privateservices.ws

perfect-numbers.cc

mega4u.biz

accessltd.ru

pwnshop.cc

bestdumps.su

mycc.su

bestdumps.biz

dumpshop.bz

cardshop.bz

dumpscheck.com

Sample email address accounts involved include:

roger.sroy@yahoo[.]com

keikomiyahara@yahoo[.]com

bulbacc@yahoo[.]com

yurtan20@e1[.]ru

ccstoreru@yahoo[.]com

persiks@online[.]ua

admin@accessltd[.]ru

bestdumpssu@live[.]com

admin@mycc[.]su

admin@bestdumps[.]biz

bdsupport@jabber[.]org

Stay tuned!

1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdDeUZYLVk4gu-HOsglPjAXLH8x9eAFeBjuwaAdXA1ZHBQa

EGaJDHpEhOmIndBgoW08DydCxHVmWCMJm8DLNdHeeolosUh_Px_7uV

1.3.2 Iran’s Afkar System Yazd Co Ransomware (2023-12-01 14:15)

[1]
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The following is all the associated ransomware themed domains known to have been associated with Iran’s [2]Afkar System Yazd Co ransomware.

152





Sample domains known to have been involved in the campaign include: hxxp://newdesk.top

hxxp://onedriver-srv.ml

hxxp://symantecserver.co

hxxp://microsoft-updateserver.cf

hxxp://msupdate.us

hxxp://service-management.tk

hxxp://aptmirror.eu

hxxp://winstore.us

hxxp://my-logford.ml

hxxp://gupdate.us

hxxp://tcp443.org

Sample email address accounts known to have been involved in the campaign include: amirbitminer[.]gmail.com

thund3rz[.]protonmail.com

1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhympAI9v9pcVjKEb1h63PgbDh7yMdUstpR7JseCxV0OLp4d

B4zU8mjvlBIqC8sK2XKTlCWMEngyHfjJO4YOE_dp40A4rpvBViA46i

2. https://rewardsforjustice.net/rewards/ahmad-khatibi-aghda/

1.3.3 Email Address Accounts Known To Belong To Owners of E-Shops for Stolen Credit Card Details - Part Two (2023-12-01 14:15)

[1]
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The following are personally identifiable email address accounts including domains known to belong to owners of E-Shops for stolen credit card data.

Sample email address accounts include:

admin@accessltd[.]ru

rubensamvelich@gmail[.]com

rubensamvelich@yahoo[.]com

bulbacc@rocketmail[.]com

bulbacc@yahoo[.]com

ooo.service@yahoo[.]com

dumps.cc@safe-mail[.]net

b2b.maxim@gmail[.]com

lvjiecong@yahoo[.]com[.]cn

roger.sroy@yahoo[.]com

elche011@yahoo[.]com

keikomiyahara@yahoo[.]com

dcb725@gmail[.]com

wattt80@yahoo[.]com

yurtan20@e1[.]ru

vipforexbiz@gmail[.]com

kachanaburi@yahoo[.]com

persiks@online[.]ua

alexandanns@gmail[.]com

bestdumpssu@live[.]com

admin@mycc[.]su

admin@bestdumps[.]biz

tonchang2011@yahoo[.]com

ccstoreru@yahoo[.]com

bdsupport@jabber[.]org

Stay tuned!

1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgONr1NXLc9gwthg7GV6LMi35CCnYDEZ9VXNxBtzTB05t2NQ

0ioYPe1ylX7ImNnq0t31kd0sRmv2LDtTerDtGe4S2EHbz8RZFHKwa8
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1.3.4 Cybercrime-Friendly Forum Communities - Part Two (2023-12-01 14:16)

[1]

The following is a compilation of currently active cybercrime-friendly forum communities.

Cybercrime-friendly forum communities include:

hxxp://crdforum.cc/

hxxp://darkwebmafias.net/

hxxp://darkstash.com/

hxxp://crdpro.cc/

hxxp://www.cardingclub.net/

hxxp://www.russiancarders.se/

hxxp://validmarket.io/

hxxp://cardingforum.cx/

hxxp://carding.sh/
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hxxp://bitcarder.com

hxxp://cardingleaks.ws/

hxxp://www.verifiedcarder.net/

hxxp://www.legitcarder.ru/

hxxp://www.crdworld.com/

hxxp://cardingmafia.to/

hxxp://cardingforum.cx

hxxp://crdforum.cc

hxxp://darkstash.com

hxxp://carders.biz

hxxp://crdpro.cc

hxxp://carders.mx

hxxp://carding-forum.com

hxxp://crdclub.su

hxxp://procrd.pw

hxxp://cardmafia.cc

hxxp://cardingforum.info

hxxp://cardingleaks.ws

hxxp://darkpro.net

hxxp://crackingforum.to

hxxp://cardingworld.ru

hxxp://darkwebmafias.ws

hxxp://leetforums.ru

hxxp://legitcarders.ws

hxxp://crdcrew.cc

hxxp://prtship.pro

hxxp://verifiedcarder.net

hxxp://legitcarder.ru

hxxp://carders.zone

hxxp://drdark.ru

hxxp://darknetweb.ru

hxxp://bpcforum.ru

hxxp://wc-club.com

hxxp://cybercarders.com

hxxp://bitorder.pw

1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgm8lPiYpLELTtHHKTHH5ABO-flBGv3Y7SdC8d9kLkjN_JI7

9D8OrRdrXL73MOowp57Ws2l4b0WU64J3tJ-fOs3LEgHmGEcRvuu9M-
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1.3.5 Rewards for Justice - Dancho Danchev (2023-12-01 14:16)

[1]

The following are domains and personally identifiable information on a bulletproof hosting provider mentioned by the Conti Ransomware gang.

hxxp://school-global.ru

hxxp://youladance.ru

Телефон: +373 775 96666

E-mail: info@morene[.]host

Skype: morene[.]host

Jabber: morene@jabber[.]morene[.]host

ICQ: 700812649 / 702647156

Telegram: @hostmorene

Viber: +373 775 96666

WhatsApp: +373 775 96666

Онлайн-чат: https://morene[.]host

1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjeNRZKfXpOlGWWk0WnxS2roHK-rR5QZwmCn9KtS_i7BrZvb

aBKHjVzwrTMk1XskCQfkoYAdwIgIBKuufAwuGWD6eKUjh1XLjybntu
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1.3.6 Full Names of Ashiyane Digital Security Team Members (2023-12-01 14:16)

[1]

The following compilation is a set of full names of Ashiyane Digital Security Team Members.

The following are the full names of Ashiyane Digital Security Team Members: Keyvan Sedaghati — keivan

Ramin Baz Ghandi — fr0nk

Erfan Zadpoor — PrinceofHacking

Hamid Norouzi — eychenz

Poorya Mohammadrezaei — Hijacker

Omid Norouzi — Sha2ow

Milad Bokharaei — ®Maste

Vahid Maani — WAHID 2

Kaveh Jasri — root3r

Ali Hayati — Zend

Milad Mazaheri — mmilad200

Mohammad Reza — iNJECTOR

Mohammad Mohammadi — Classic

Nima Salehi — Q7X

Milad Jafari — Milad-Bushehr

Shahin Salak Tootonchi — ruiner _blackhat

Amin Bandali — anti206

Mohammad Hadi Nasiri — unique2world

Mahdi Chinichi — Virangar

Amir Hossein Tahmasebi — _ _amir _ _

Ashkan Hosseini — Askn
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Mohammad Tajik — taghva

Meghdad Mohammadi — M3QD4D

Sina Ahmadi Neshat — Encoder

Behrouz Kamalian — Behrouz _ice)

Farshid Sargheini — Azazel

Armin — n3me3iz

Mahdi K. — r3d.z0nE

Iman Honarvar — iman _taktaz

Ali Seid Nejad — Ali _Eagle

Mohammad Reza Ali Babaei — mzhacker

Navid Naghdi — elvator

Mohammad Reza Dolati — HIDDEN-HUNTER

Mehrab Akherati — AliAkh

Amin Javid — Gladiator

1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi7IyBYLem0PprQN3d1WJtxQInJdz-Yn8N_PzzsdtiLbtoQ9

bvs5APodv141dNJck4xSAnG1Uc13KApTawG8zBak7DPJe3w_HZ0V9b

1.3.7 Cybercrime-Friendly Forum Communities (2023-12-01 14:16)

[1]
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The following is a recently obtained compilation of currently active cybercrime-friendly forum communities.

Sample cybercrime-friendly forum communities include:

hxxp://www.darkteam.se/

hxxp://crdforum.cc/

hxxp://legitcarders.ws/

hxxp://cardingworld.ru

hxxp://carders.biz/

hxxp://carding.cm/

hxxp://cardmafia.cc/

hxxp://cardingforum.cx/
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hxxp://carder.market/

hxxp://www.russiancarders.se/

hxxp://darkwebmafias.net/

hxxp://legendzforum.com/

hxxp://procrax.cx/

1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6u0-qeO56o0dcXODfmOy509Zo0gOtjeSrvCX7eHLiiKR6O

s7bJmwT-0KQRn7ldLGw_wtj0xV4CVhlexBwmjGFfYz1xdnmUKKnVuP

1.3.8 Emennet Pasargad (2023-12-02 13:18)

[1]

The following are domains and personally identifiable email address accounts belonging to Iran’s Emennet Pasargad also known as Eeleyanet Gostar and Eeleyanet Gostar.

Sample domains:

eeleyanet.com

eeleyanet.ir

Sample personally identifiable email address accounts:
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sidafin@mihanmail.ir

amirhaghighi2014@yahoo.com

safary.mansoor@gmail.com

Rahimi@Live.com

faranakbehjati@yahoo.com

h.boloukat@gmail.com

1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgaM7d2zl5cJqO-5WXyXxx3pgAEdNc4bc07ykdnWC1dKC79m

HrXcQz2mMmhvO4UL4KEh38UftzkffV2d7S__LqsOTjJHw05rLxViRN

1.3.9 The Conti Ransomware Gang’s OSINT Artifacts (2023-12-02 16:58)

[1]

The following is a set of OSINT artifacts courtesy of the Conti Ransomware gang.

hxxp://cc2-btc.cc

hxxp://dyncheck.com

hxxp://luxchecker.pw

hxxp://major.ms

hxxp://securecall.club

hxxp://securecall.top

hxxp://checkzilla.io

Including the following two XMPP/Jabber accounts:

mcduckgroup@exploit.im

uvoice@xmpp.jp

1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgthj1YTW9Z-3LSugCzVFjASk9li6DkDC86FuF9NR7ogVGlX

4ou0ZM1wV-penFn_RmPeDf4yrMx5OKMiewt36Knga2Jjo8mEjLpqot

162



1.3.10 The Most Innovative Cyber Security Leader to Watch in 2023 (2023-12-15 19:01)

[1]

Dear blog readers,

I did it. Check out the article [2]here.

Related photos:

[3]
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[4]
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[5]
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1. https://blogger.googleusercontent.com/img/a/AVvXsEhXRbfSfRB_QXONLwVjOtLHMeHcd7tZrpg7pzrBXsBhSJEjo1PMBsa486

RHClNKDwMsCmT3gsvtUIBS58c8GDyBeWAcUZh1Q2MPYU7k3m73kIoy

2. https://ciolook.com/in-pursuit-of-cyberjustice-dancho-danchev-navigating-the-world-of-cyberthreats/

3. https://blogger.googleusercontent.com/img/a/AVvXsEgszGrgAU4IQGEHAzl3k13y1NuzABAozIIw4xlRWldocOJYVWOHN5ge64

iBawmDsNM9x24-2a65edbQZKay_rVlippNCRaFj9Ysq8e38bl0XQSM

4. https://blogger.googleusercontent.com/img/a/AVvXsEgiCqUArO53yZ-fnGUXfhr10mfnkOmnjLU6VTths7XOuG19O5T922a68H

HsV9HX7WQcljbHo8o2KBbe3E-BWq17m7z31YuW2y2Oz-o-bdBO5Iuj

5. https://blogger.googleusercontent.com/img/a/AVvXsEjnSVvWy3ng_U59VavKdElNLi9l28ZyDYN7mwjNRJBIgilMHABal1W5Ik

fUdeJHnZJRXgAvv4RvPcDzDZ9AjkkMSEti-RN4ZjMmq4QBZnnhmTs0
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1.3.11 Looking for a Research Sponsorship (2023-12-15 19:02)

[1]

Dear blog readers,

Are you interested in sponsoring my research on my way to grab a new laptop for the holidays?

Drop me a line at dancho.danchev@hush.com to discuss and I’ll do my best to deliver the results that we agree upon.

1. https://blogger.googleusercontent.com/img/a/AVvXsEgUXU6Gv2XgNtllk17XjUojGdEok8IoIdchRFXp68qdHG20vwY_MJo8dY

oEC3JO903r8Uu-zZO8ws-LadJN4QQb_Pzoooru5XbMcuf3jOsRZha2

1.3.12 Offering my Laptop for Memorabilia Purposes (2023-12-15 19:02)

[1]
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Dear blog readers,

Who wants to acquire and purchase my laptop 2015-2023 for memorabilia purposes and possibly somehow use it preserve or display it somewhere?

Related photo:

[2]
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Drop me a line at dancho.danchev@hush.com

1. https://blogger.googleusercontent.com/img/a/AVvXsEg_7MSW_z_V-I6SgkVJNt8q-Dr6BNNXD1XXxGdzKI3ffKVtnXOBu0H0BJ

AthxA8YHhEZoSDjTK5nn19fVjpW3ELuPIg2myBgJXyiFSARkjzw6Fb

2. https://blogger.googleusercontent.com/img/a/AVvXsEg_3NNP5AMTHZ0iqE81hljwznVHrDvieDVysTrsB3tGVqXlCR0WibRbWK

qFXDsB1IgQXEJGLjuq7vEJc4N1cgRNtWWjvdX4_PJ5odsdVEG0U_yj

1.3.13 Upcoming Webinar Participation (2023-12-15 19:02)

[1]
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Dear blog readers,

Check out the link [2]here.

1. https://blogger.googleusercontent.com/img/a/AVvXsEjWuPOJvNGz2brUfWLlOBK6zBZoFcHgktfGUettcNC26tSTrLP1L9eLn7

i9FPmOysfhRdFylsm0OtLhHew-ZVfTB2oGTzJa1rtIBCm62M276XJO

2. https://www.linkedin.com/events/theevolvingthreatlandscapeandth7138811320363036672

1.3.14 Who’s Pushing All The "Fake Updates" Malicious Software Using Redirectors and Traffic Distribution and Redirection Systems and Tools Domains?

(2023-12-28 13:03)

[1]
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I’ve recently observed an increase in compromised or exploited to be precise in the context of abusing unfixed web application flaws such as for instance redirection notifications on high-traffic and high-profile Web sites where the ultimate goal would be to push traffic distribution and traffic management rogue domains part of a URL redirection chain where the ultimate goal would be to utilize both legitimate high-traffic and high-profile Web sites including purely malicious Web sites for the purpose of dropping malicious software on the targeted hosts.

The surprising part? The primary and entire portfolio of these traffic redirection and traffic management domain are parked on 193.106.175.18 - AS50465 - IQHost Ltd where one of the bigger domain farms is parked at hxxp://biggerfun.org.

[2]
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Sample misconfigured high-traffic and high-profile Web sites that allow redirections potentially bypassing reputation filters include:

hxxp://afmonline.org/?URL=hxxp://khTrnB0WV8.biggerfun.org/khTrnB0WV8/

hxxp://whiskyparts.co/?URL=m88Z2iiER.biggerfun.org/m88Z2iiER/

hxxp://hardemancounty.org/?URL=http %3A %2F %2F1FXddDHkYN.biggerfun.org/1FXddDHkYN/

hxxp://bukkit.org/proxy.php?link=hxxp://uToqSuwC.biggerfun.org/uToqSuwC/

hxxp://www.centralsynagogue.org/?URL=hxxp://NjNr8Mkm.biggerfun.org/NjNr8Mkm /

hxxp://board-en.piratestorm.com/proxy.php?link=http %3A %2F %2Fnpn8KwBr.biggerfun.org/npn8KwBr/

hxxp://boards.theforce.net/proxy.php?link=hxxp://WihYqBBuvj.biggerfun.org/W ihYqBBuvj/

hxxp://www.cutrite.com.au/?URL=hxxp://9mVRlHjF.biggerfun.org/9mVRlHjF/

[3]
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Sample traffic redirection and traffic management domains involved in the campaign include: hxxp://surelytheme.org

hxxp://bluegaslamp.org

hxxp://throatpills.org

hxxp://draggedline.org

hxxp://machinetext.org

hxxp://throatpills.org

hxxp://climedballon.org

[4]

Sample related domains known to have been involved in the campaign and are currently parked at 193.106.175.18 - AS50465 - IQHost Ltd include: hxxp://jsqur.com

hxxp://libertader.org

hxxp://mrbotn.jsqur.com

hxxp://www.catsndogz.org

hxxp://user179.jsqur.com

hxxp://marcusdesigninc.jsqur.com

hxxp://nuvoleparlanti.jsqur.com

hxxp://fserver.jsqur.com

hxxp://download.www.windowlight.org

hxxp://mtf-misawa.jsqur.com
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hxxp://cdn.jsqur.com

hxxp://dashtiha.jsqur.com

hxxp://vitkutin.jsqur.com

hxxp://permisdeconduire.jsqur.com

hxxp://olympics.jsqur.com

hxxp://emv1.vibedroom.org

hxxp://melpar-emh1.jsqur.com

hxxp://u.admin.backendjs.org

hxxp://billtieleman.jsqur.com

hxxp://descarte.jsqur.com

hxxp://4m.jsqur.com

hxxp://sn007.jsqur.com

hxxp://win24.jsqur.com

hxxp://web3449.jsqur.com

hxxp://cgxdave.jsqur.com

hxxp://cassandre.jsqur.com

hxxp://deeptrickday.org

hxxp://xxxl80.jsqur.com

hxxp://91.jsqur.com

hxxp://castlerea.jsqur.com

hxxp://dkline.jsqur.com

hxxp://daws-512.jsqur.com

hxxp://ufl.jsqur.com

hxxp://eggert.jsqur.com

hxxp://apps.jqueryj.com

hxxp://frightysever.org

hxxp://beal.jsqur.com

hxxp://survey.backendjs.org

hxxp://best-funny-quotes.jsqur.com

hxxp://jeanm.jsqur.com

hxxp://forms.admin.backendjs.org

hxxp://comtenc.jsqur.com

hxxp://dannyfilm.jsqur.com

hxxp://office.backendjs.org

hxxp://jqueryj.com
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hxxp://longtail.jsqur.com

hxxp://web6201.jsqur.com

hxxp://hoytek-gw4.jsqur.com

hxxp://gazeta.jsqur.com

hxxp://www.treegreeny.org

hxxp://cpfm.jsqur.com

hxxp://asims-rdck1.jsqur.com

hxxp://indiajobscircle.jsqur.com

hxxp://babbar.jsqur.com

hxxp://gorki.jsqur.com

hxxp://gmailblog.jsqur.com

hxxp://dvan.jsqur.com

hxxp://carpinteros-aluminio.jsqur.com

hxxp://web18332.jsqur.com

hxxp://wallah.jsqur.com

hxxp://si.jsqur.com

hxxp://shems.jsqur.com

hxxp://vigen.jsqur.com

hxxp://sws.jsqur.com

hxxp://routetest.jsqur.com

hxxp://account.admin.backendjs.org

hxxp://secure-ite2-origin.jsqur.com

hxxp://mdm.backendjs.org

hxxp:// _dmarc.jqueryns.com

hxxp://mdm.backendjs.org

hxxp://mntc.jsqur.com

hxxp://powerful.jsqur.com

hxxp://whitney.jsqur.com

hxxp://stream.jsqur.com

hxxp://uhost.jsqur.com

hxxp://unix3.jsqur.com

hxxp://www.florida.jsqur.com

hxxp://jkelley.jsqur.com

hxxp://derby.jsqur.com

hxxp://currier.jsqur.com
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hxxp://wp.admin.backendjs.org

hxxp://frente-a-camaras.jsqur.com

hxxp://facman.jsqur.com

hxxp://b10.jsqur.com

hxxp://arehn.jsqur.com

hxxp://cprat.jsqur.com

hxxp://hpermsp.jsqur.com

hxxp://ksia.jsqur.com

hxxp://jhansen.jsqur.com

hxxp://biggerfun.org

hxxp://kodakr.jsqur.com

hxxp://samfox.jsqur.com

hxxp://apps.jsqur.com

hxxp://passe.jsqur.com

hxxp://walkman.jsqur.com

hxxp://stovallscx.jsqur.com

hxxp://antivir.jsqur.com

hxxp://link2-me.jsqur.com

hxxp://xx9.jsqur.com

hxxp://quine.jsqur.com

hxxp://v.circuspride.org

hxxp://cn.circuspride.org

hxxp://x.circuspride.org

hxxp://pay.circuspride.org

hxxp://ssl.circuspride.org

hxxp://physiology.jsqur.com

hxxp://mytabletpcuk.jsqur.com

hxxp://gdsz.jsqur.com

hxxp://daws-43-5.jsqur.com

hxxp://cfg.circuspride.org

hxxp://ip90.jsqur.com

hxxp://oily.jsqur.com

hxxp://jqueryh.org

hxxp://tamarack.jsqur.com

hxxp://macgo.jsqur.com
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hxxp://interlock.jsqur.com

hxxp://cmu-cc-vma.jsqur.com

hxxp://daws91-3.jsqur.com

hxxp://norman.jsqur.com

hxxp://www.16.jsqur.com

hxxp://web3933.jsqur.com

hxxp://mta-sts.bluegaslamp.org

hxxp://212.jsqur.com

hxxp://dooly.jsqur.com

hxxp://www.bigbricks.org

hxxp://machinetext.org

hxxp://kb.windowlight.org

hxxp://catsndogz.org

hxxp://whitedrill.org

hxxp://www.neworderspath.org

hxxp://jqueryns.com

hxxp://sorteios-e-promocoes.jsqur.com

hxxp://web5422.jsqur.com

hxxp://ivtortypqfyi.greedyclowns.org

hxxp://ivtorlypqfyi.greedyclowns.org

hxxp://ivladimir.surelytheme.org

hxxp://ivbdimir.surelytheme.org

hxxp://liorida.surelytheme.org

hxxp://rota-sts.climedballon.org

hxxp://climedballon.org

hxxp://treegreeny.org

hxxp://daddygarages.org

hxxp://emperorplan.org
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hxxp://bigbricks.org

hxxp://greedyclowns.org

hxxp://vibedroom.org

hxxp://backendjs.org

hxxp://dailytickyclock.org

hxxp://neworderspath.org

hxxp://devcodejs.org

hxxp://cancelledfirestarter.org

hxxp://greedyfines.org

hxxp://limeerror.org

hxxp://bluegaslamp.org

hxxp://throatpills.org

hxxp://drilledgas.org

hxxp://draggedline.org

hxxp://windowlight.org

hxxp://sevenpunches.org

hxxp://circuspride.org

hxxp://linedgreen.org

hxxp://surelytheme.org

hxxp://vivaldi-ed.group

hxxp://cashapp-renewal.com

hxxp://ing-update.info

hxxp://bankid-app.net

hxxp://commonwealth-renewal.com

hxxp://transfer-management.com
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hxxp://banko-atnaujinimas.com

hxxp://s-identity-verwalten.com

hxxp://bigfat.shop

hxxp://fomzerapoze.shop

hxxp://aremonuza.shop

hxxp://hanmozapre.shop

hxxp://bamizorapa.shop

hxxp://yazevora.com

hxxp://ipko-aktualizacja.com

hxxp://halifax.signin-helpdesk.com

hxxp://signin-helpdesk.com

hxxp://hailfax.signin-helpdesk.com

hxxp://online-helpdesk-portal.com

hxxp://santander.online-helpdesk-portal.com

hxxp://jquerypure.com

hxxp://de-system-913580.xyz

hxxp://targo.de-system-913580.xyz

hxxp://be-systeem-8510598.xyz

hxxp://ns1.putinkremel.su

hxxp://notudhost.com.ru

hxxp://trsew.ru

hxxp://fashmodsite.uno

hxxp://nnnten.ru

hxxp://tenhost.com.ru

hxxp://au-08.top

hxxp://jutralalali.xyz

hxxp://gilirges.ru

hxxp://www.gilirges.ru

hxxp://ftp.gilirges.ru

hxxp://www.tanmhopisj.xyz

hxxp://tanmhopisj.xyz

hxxp://dev.urbangroup.ru

hxxp://equalizer.dev.urbangroup.ru

hxxp://vk.equalizer.dev.urbangroup.ru

hxxp://partners.urbangroup.ru
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hxxp://realty-2.urbangroup.ru

hxxp://ivakino.urbangroup.ru

hxxp://gtry.ru

hxxp://serferio.ru

hxxp://forum-laikovo.urbangroup.ru

hxxp://urbangroup.ru

hxxp://myrussianland.ru

hxxp://gb2nevinsk.ru

hxxp://englishbiblioteka.ru

hxxp://aleana63.ru

hxxp://aptekaplus23.ru

hxxp://chulkovo.info

hxxp://mchedlidze.ru

hxxp://stroytransm.ru

hxxp://flystore.ru

hxxp://kino-pirat.net

hxxp://2sunss.com

hxxp://posadisvoederevo.ru

hxxp://testcosmetic.com

hxxp://vkino.me

hxxp://v1080hd.com

hxxp://r-style.com

hxxp://science-techno.ru

hxxp://kinotuz.ru

hxxp://901901.ru

hxxp://ludota.ru

hxxp://maindoor.ru

hxxp://kinoxaba.ru

hxxp://youcanexcel.ru

hxxp://gidonlinehd.ru

hxxp://kinoggo.ru

hxxp://100pdf.net

hxxp://kinoext.ru

hxxp://www.mreporter.ru

hxxp://magobr.ru
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hxxp://lg-soft.ru

hxxp://anapa-new.ru

hxxp://fat-man.ru

hxxp://gracio.ru

hxxp://ikd.ru

hxxp://poseidonboat.ru

hxxp://vetla.ru

hxxp://74dom.ru

hxxp://kabrik-servis.ru

hxxp://tehnopanda.ru

hxxp://creativejournal.ru

hxxp://ufamenu.ru

hxxp://idf.ru

hxxp://sporthit.ru

hxxp://injgeo.ru

hxxp://asbank.ru

hxxp://wood-lux.ru

hxxp://lbf51b14.justinstalledpanel.com

I’ll continue monitoring the campaign and will post updates as soon as new developments take place.
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2024

2.1 January

2.1.1 Who’s Behind the Conti Ransomware Gang? - Part Two (2024-01-03 16:35)

[1]

In a series of blog posts I exposed the "[2]The Top Management of the Conti Ransomware Group’s Fashion and Charity Brands" including "[3]Who’s Behind the Conti Ransomware Gang" where I also offered an in-depth peek inside "[4]The Conti Ransomware Gang and the Trickbot Cybercrime Enterprise XMPP’s and Jabber Account IDs" where I also successfully applied for the Rewards for Justice program "[5]Applying for the Rewards for Justice on the Conti Ransomware Gang Program" where I also published never-published or discussed before

"[6]New Images Courtesy of the Conti Ransomware Gang" including my Rewards for Justice Conti Ransomware Gang research compilation "[7]Dancho Danchev’s Rewards for Justice Conti Ransomware Gang Research and Analysis Compilation" which you can grab from [8]here including my first Twitter Space on how I tracked down the Conti Ransomware Gang "[9]My 183

First Twitter Space on How I Tracked Down The Conti Ransomware Gang Using Real-Time OSINT" including to expose "[10]Exposing Bentley and Liam From The Conti/Trickbot Malware Gang" including to publish never-published or discussed before Conti Ransomware Gang videos and images courtesy of the "[11]The Conti Ransomware Gang" including to publish an additional set of never-published or released videos courtesy of the Conti Ransomware Gang "[12]The Conti Ransomware Gang - Videos - Part Two" including to elaborate on some of my research in my "[13]Rewards for Justice - Dancho Danchev" including to publish an additional set of "[14]The Conti Ransomware Gang’s OSINT Artifacts" including to also provide

"[15]A Compilation of Conti Ransomware Gang BitCoin Transaction IDs - An OSINT Analysis"

including "[16]A Compilation of Known Conti Ransomware Malicious Domains - An OSINT

Analysis" including "[17]A Compilation of Known Conti Ransomware Themed Malicious and Fraudulent MD5s - An OSINT Analysis" including "[18]Exposing the Fashion Brands of the Conti Ransomware Group" including "[19]Exposing the Trickbot Malware Gang - An OSINT Analysis"

including "[20]Exposing the Conti Ransomware Gang - An OSINT Analysis" including "[21]A Compilation of Known Conti Ransomware Gang Malicious Executable Download Locations - An OSINT Analysis" including "[22]Exposing the Conti Ransomware Gang - An OSINT Analysis"

including "[23]Rewards for Justice - Dancho Danchev" including "[24]How to Take Down the Conti Ransomware Gang - A Practical And Relevant Case Study on Taking Down Cybercriminal Infrastructure - A Practical Example".

In this post I’ll do a last round of elaboration into all the research efforts I’ve been putting into identifying core members of the Conti Ransomware Gang using their recently leaked internal communication publicly including to use exclusively OSINT for the purpose of successfully identifying key and core members of what appears to be a diversified cybercrime gang that has a pretty interesting way of distributing their fraudulently obtained income in the context of sponsoring and participating in fashion shows and other educational and music sponsorship efforts and campaigns on the Russian market supposedly using the stolen income that they’ve obtained using their ransomware tactics and techniques.

What I came up was the following a private teaching school a rap and hip-hop music label where we got some of the core Conti Ransomware Gang members doing their advertising creative and brochures next to doing their hardcore "upcoming" ransomware brand releases including several fashion and clothing brands where we once again have core members of the Conti Ransomware Gang doing their advertising and brochure creative.

The primary goal behind this post and analysis would be to elaborate as to the diverse nature of the members of the Conti Ransomware Gang in the context of having them involved in fashion music and teaching schools business and charitable initiatives in Russia supposedly using the stolen income which they obtained using their ransomware operation online.

It’s also worth pointing out that this entire analysis including the OSINT analysis and the OSINT

research and enrichment analysis is entirely based on the Conti Ransomware Gang’s internal leaked communication and is done exclusively by me with some quite positive and confirmed results already.

[25]

184



Sample Conti Ransomware Gang image obtained using public sources based on the gang’s internal leaked communication for a cover of a Russian Rap and Hip-Hop Artist and his album "Personality" apparently produced by the Conti Ransomware Gang’s team members responsible for the advertising creative development for the gang Based on my research and analysis the photo obtained using public sources based on the gang’s internal leaked communication for a cover of a Russian Rap and Hip-Hop Artist and his album "Personality" belongs to the Russian rap and hip-hop artist known as Linkvill where we have members of the Conti Ransomware Gang producing their logos and advertising creative part of their portfolio.

Personally identifiable information for Evgeny Samsonov also known as Linkvill: hxxp://vk.com/eugene _linkvill

hxxp://vk.com/artist/linkvill
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hxxp://vk.com/linkvill _poetry

hxxp://www.youtube.com/channel/UC9fVu7UVgxBaCRz7RJD7DeQ

Sample personal photos of Evgeny Samsonov also known as Linkvill:
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It also appears that Evgeny Samsonov also known as Linkvill whose album cover "Personality"

was obtained using public sources and appears to be produced by members of the Conti Ransomware Gang who are responsible for creating the gang’s advertising creative is also part of the Plastika Sound Boutique Ekaterinburg where we also have a second image courtesy of members of the Conti Ransomware Gang mentioning the Plastika music label.

[49]

Sample personally identifiable information for Plastika Sound Boutique Ekaterinburg: hxxp://vk.com/plastika.space

hxxp://plastika.space

Address: улица Кирова, 9, Екатеринбург

Part of Plastika Sound Boutique Ekaterinburg are:

- Nikita Zharinov - born on 10th of January 2002

- Ice Costa - hxxp://vk.com/icecosta

- Alexey Plyushkin - born on 11th of April 1994
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It gets even more interesting when we research a second image courtesy of the Conti Ransomware Gang which was once again obtained from their recently leaked internal communication.
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Sample Conti Ransomware Gang image obtained using public sources based on the gang’s internal leaked communication for a cover of a Russian Rap and Hip-Hop Artist Ice Costa apparently

produced by the Conti Ransomware Gang’s team members responsible for the advertising creative development for the gang

The image appears to be a second album cover once again produced by team members of the Conti Ransomware Gang responsible for advertising logos and advertising creative development this time by Ice Costa who is also a Russian rap and hip-hop artist who is also part of the Plastika Sound Boutique Ekaterinburg.

Sample

photos

of

Ice

Costa

(hxxp://www.youtube.com/channel/UCJQmq6U

-

IEYlDnrNSOzZC6dQ):
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The original Ice Costa album cover which is greatly similar to the one produced by members of the Conti Ransomware Gang obtained using OSINT
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Sample photos of Nikita Zharinov who is among the original founders of the Plastika Sound Boutique Ekaterinburg:
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Sample photos of Alexey Plyushkin who is among the original founders of the Plastika Sound Boutique Ekaterinburg:
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It appears that based on my OSINT analysis Alexey Plyushkin is the author of the original cover for Ice Costa’s album which can be also found in Conti Ransomware Gang’s internal leaked communication which means that he supposedly knows the actual team member of the Conti Ransomware gang that produced the advertising creative who also produced Evgeny Samsonov’s (Linkvill) album cover.

Next we got three related images once again courtesy of the Conti Ransomware Gang’s internal leaked communication this time for "Global School" teaching enterprise and for the Youla Land dance lessons school in Russia.

Sample photos include:
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Sample personally identifiable information:

hxxp://school-global.ru

hxxp://youladance.ru

Sample photos:
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[71]

Next we’ve got yet another photo of team members of the Conti Ransomware Gang once again based on their internal leaked communication mentioning [72]Morenehost which is a well known bulletproof hosting provider.
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Sample personally identifiable information:

Телефон: +373 775 96666

E-mail: info@morene.host

Skype: morene.host

Jabber: morene@jabber.morene.host

ICQ: 700812649 / 702647156

Telegram: @hostmorene

Viber: +373 775 96666

WhatsApp: +373 775 96666

Онлайн-чат: https://morene.host
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3Sths9Vg8iPT_I9cnjfXXQvCldi6FXnwr4YVh3BGDW8_mqf7DzIghuTa

31. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj3zjZoqZeEi8hBV4zJmG3zOvgANZmaEAQE4mOo-Q8ysZp

-mnkbal7yErC3ysO41KsLAOFT6CZuri5u8Rt6rAPcDNcVv0iCsurL_36

32. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxS8EzaSTjF8YXMywNZECqn7S-RiY_cmpcKADIJFhAHiu

9fCWWSn3a7UbIY3lLk_c2JBQr5LdAGsXhjOtieRxyYto-3xM72fpT3nK

33. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPUaR0TjgGrJXb5rloTQjy5OhXLgGC8-_GiwOhzLBqfAe

zZ6aHtah7BFC0yfE1MkYs49umHPBGDTv4a7-K07HIkXMayn_wAf8IOqu

34. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhGfIk9yPSP97Kll4fTZxPrygoBFf6X-7oOgM_5G-aePUQ

p6sP5HF-6pgx60D3axiv4Zf-3-Mfz23Y_59R7Wd4sF5Rpn73O165p8c8

35. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjUsR3ZF_Vt8O3UOJKD5k6n-KRo9tjkaCt4-RyHeGkd9l

flRGOFscZ055MR7SUG4V018NJroN7Eafa0BLfQ-9Mz0TiuoC9Jgyqrcp

36. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhWISUdUBDQkmnrcGkSOiIvkRd1Z1FVeHUU-oE6iUxzFIb

xESt_3egR-zK3G8Sn6tcS__hOXFkpf6wdiVD1KzjYOFENQG2xVmilZXU

37. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkeaHz5E01hZDNK6RzQr2E-LyUZfmzx3yJFyhLBeaQKIS

xE_5Tt_AIQhT-DW294uD99TiAF1Kvl-F539aMU-m_WDBekJireF40mGc

38. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjoSe9-LSy5iWIQoRraKMiuHKJm8vyN4F0TiNYErgL4sYX

rJp9e6zIEUqGC-Aa9l5c5q0UXe8wbSjz4luFmVQ1eKewcbVef70LQ9D-

39. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiVs9XaIWehVTLLjn7R8foO3WuBtz3N6NQq78aMfvFIf-g

z4wBHbAqOwPJG7c5dOoc0U_3K3nCnMmFJhMvz3Xq_BZLW5ObJJnk2bLy

40.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUkN2_DQTdmybCDSTGy6bHS9tulo9boP7woS-ofejmnh-

dXz_2sUd83GqTIbH7c4wbqauxtwk9ZyLooP2i63YLG5gu9EZTmTiQprG

41.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtwG9x4GJFUr9oCiSd4w7qO1hdG_kx6f6DICUah1BFDed

usNvMjDMqc4PyvpDQWK7qadRoPexhgyBr9h89OwueNwH1-sm_1eM2jly

42.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhpAD29-K_hyphenhyphentL56ciTFgBZiZafNqfu4uO8E

7V9_4gN-Q5USqe3833sGFGHKQfkPmv7lEn1rYFMz-sl5BgMZOb9XV72Z
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43.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjwFnhPpy2XhpAH9bjLwbCsOZbxucSrwtsso0T9C4ZhAe3

gsxuT3c-UvgOsDTeOGPgxJxbvMmpkc8xDjXZu6DockjZB0RqlvHxcnxa

44.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhETWCHEpdX9H5qwWQjprL9UVLwomyKakYnHaTjnqNKJNL

yHRmuZn8DIcjUGm6lkdfNYyhShQmBHruYbR5GBHhJchWxV1h1j1FqkUH

45.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiRpqMBXIBhZOs5cbuKhucV7Cdy6WKd6nib8eyA0XbjbiE

DbgREHPx3V2g5g3zPhx89R8BRoG9yJ6rN84mGBXD9VpdvMgjuhjW31cn

46. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhaClcC-vMT7QmI0IYsLcf9Fp4ezooJmymkAfGLFb4c7-S

cvTmErvr68gHrzv8E5v7GIc7qMOMlVrpfFeiwJCp5QLnROc-3f04DORv

47.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv7tEf7YVfp7yazkAORsCjHX8uiofmt-t31CvTzE9jpTf

D9uz9w-ROcvtpmbGGZUEbxE_FNA_oOzjAs2DprBnQ70xZqNwA_Dh30X6

48.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgAk4G2anmgIuSrCD8BpL8DFA4R4nEENXCJ2MXjwnAo1WC

hUf2wsjAxlmlrVr6gy8NiLf-1tsdFRa_wqjpE2MxhJDEsHsM17_HQckW

49.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9ZVdM4vJm0xEVh2hI-u2NtZlwxg87EQDyg3K6RezvFax

dCkts4MKg3VozmF0kLfXDSbo0a1brFJ6kImueRmdZtQtr918VyJMIndn

50. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhdRKE9hoDCYZb1vhz2M90xKHZws1R7lAJJifclpJP-t9I

sxI5FJ_XKLFKYYE4jQtVnvjEb784tTtGuwjo68Dyn8M9RWCRzzDt2hm7

51. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEije8eO8-DTUlDR2I9rY0bWimz5Mo_V-0e8dtcG7_eXg

xAOSyl6-Zug49OG73jV3yyTtAUDhOJAGYVqZWShgtGYt6dz2fifi8jTy

52.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3VlIxtAsO6L7ROOchgRSHMXDyvmkZyho4KjagwuGm4UX

cO8IDgvOt3oaKjAgsSd5OlTeRNy8Kxk54gFuhYBPmI2iZTJCLIxsS4v2

53. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_tk5-Ne57sHVOJB-XAnuKb6TFi6zNwaC8B4dXa8Srrpl

dFNFQU-qtYeWZn0X7EZf5Pw7tev27zQtCtLjjT1QfUnzG2mpsFGqMg8x

54. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhoFnIdLCRuiKRTspBNI9L-gQMwVf226Pq7n2fHGvkWdNJ

BxZDE4A5kgggZuSDumSOfUVH5ziw73KRmNmFjbalMa50sihMEO-qtaQf

55. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXqtvooS644054YJ-EdE6Y6cJC2u9sEO4XxLVz72k2cOn

lu-guRUm-yeyVmfEokITOJ7NaAA91DEJFeJI1yxM_p6RulsqA7dF0L_2

56. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrKPoKlH7A8Dp-ADFog9I6yZvtOVMlXORlyDhnjJRAzfK

YWEptl3D9yzq9nOGKntdua11SHBrwOT7hqNhi_Q1IGYT75cscQ33-bU5

57.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUNTZlxSraj7cPkcsaJaL80CSp4db_9m26Zwgjd4iagXs

xVRfVrOBoBg62HXlq1VU3VptMsmXYBXD6TVkx_WBgvt1zIVfXWPzwYy3

58.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzEfekAEQYKR8JkGj0S_lJXTb8bHJ5bNDCgRL38SVEbtg

FCfVgOzcCIXga_OaWjmry1-M4WSUlEjgY8ER1p4bGiSwCAWkdvn9e30t

59.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhidoT16reJxTu50pFldqD_qmYaSZR2Aciv1OzrKlKJMWe

uUVCipugHbpCNaVKC7quVnh9cZTBdqgLhOJe-y4WkXBBjflQq32knk1r

60.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgFLmqertICxwrlJajxZjZPZlI_KcBJ62TR3XI1YIaFjkU

rG7KkdsXsBDrV2wpIQ2x4Xn-m6_0mQnSmSrpM93HcDkJTplSqZhJLkS_

61. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikirF61_h4wmP5lLIfUL3B5y1fYrBOEUEAP3B-ZeDFeJN

1cWzif99ft_1_iRFEy-T4RpZDBOe0r_HuCTLEUDhyTb06_LlE30iz9rY

62. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6l4dw70_D86tTYBT_S_G1dJ0-h61P0FekIzdxw3UD4Dl

7c7151yWBVnh7DMHg91P9QsgjALt8gh1vBgWfOpPNgbpr9DKafkSUkNz

63. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQxs5BROY2UgHnqnFgjDxKk9XXWrv2Ud-fdBFuglrcTZu

SH-NeqMYZFaJwcWskoDTS62SqHACXuQqOk8390Txlg9Qvg3v8oOG8trv

64.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjvMnXif6nd8deozTnq4cbrMIZNIaaN47NhSJwVW8ZN3Ui

mYsT9oTVQdRMGQXs8lLkyWevk-HO28jnkPYqoISGvKo49KfW39WPEq64

65. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhpHpm6XCZ1eyoFlsE4YeYTMNzbfhKot-bykXsly0Lz4OM

K_8QTbfXzUnsKjtWkPGTBCkl2tg37qkbhcLGDR50tN6JcOuagrj7JY5O

66. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgh9dFXXjjE8BRUNdcQs-ScebrvZHlFXrIGsuND4YAvFOD

UV6JwtpfbfKZC2YmFne0lrpa2Nsb7EuS-kb2drorj3rzaCgmPwuRGhKx

67.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhbkvvpvQ8x4AHVVUIn6daCZS_EScpnTt8yrWuxj0jrbAu

h-_RqLPwNTt-xWjs1e8eLfKSnqyDVNDbQ7rrWXdoKyBf8jDYHxOzY-5z
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68. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEigz_KwtxtxMENDJp8ix-uppJzX3ak3o1kbs4wrHEJdrFb

vkH4TKFEkJlWk9Rw1kHUrj24o1GUzzOHyxCHNtULLLXtC9cY18g0mXR9

69.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyHNtafeg5jrd3t8xNUHzaPTv3gkAsstrdwOLUwewnlK9

0uGfCqWRSU-8KdHZHMUHuR-gTdU6VxRw-WBus3ekShmjthRxNkgqEYrd

70. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiifWuI-yj8IIjj2nDzA-2bPW4-gqI09afc2yvaD5dqX5P

mNEnlrhwwgvl4HIcoVLiqSaS48Rb3BcwIlLGRuShfr6ZG9A6VG-vEL8g

71.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDJquP89MXD_7poNDf_vRyJJsnA8KCLy89GTWqGNDoDh-

82Lu6u-jSPqRcaq2IjEurXiEOACxSfy-VzId0AqzOH9XGsMgb0t7ZhWv

72. https://intel471.com/blog/top-bulletproof-hosting-providers-yalishanda-ccweb-brazzzers-2021

73.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimLTXSAEbo10RjDuJc7J3HqLHQcTYih1As1gxDzn2RwSV

lTktemwt-XqD2mlHUiU31Sobt7pxwyfn_Ah7wNcluLEW9mOQQbOPxcQy

2.1.2 Profiling Anatoliy Sergeyevich Kovalev from GRU’s Unit 74455 "NotPetya" Malware Gang (2024-01-07 01:37)

[1]

An image is worth a thousand words. And so is a [2]link

including my research [3]here.

Related links:

hxxp://vk.com/id207493137

hxxp://vk.com/id221867060

hxxp://vk.com/id702871912

[4]
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[5]
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[6]

[7]

[8]
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[9]
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[10]
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[11]
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[12]
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1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1ig7cmIAX4VSqm9EEDOkSqKIxTezQALuT5FxeLTqHZBW7K

u1QMSn0qAWsVOafKAI4w4tb4FF27ZqsrCGeCDIbgV7_J0lrinsGLKV

2. https://rewardsforjustice.net/rewards/anatoliy-sergeyevich-kovalev/

3.

https://ia804709.us.archive.org/27/items/dancho-danchev-whois-xml-api-maltego-bulletproof-infrastructure

-2/Exposing%20GRU%27s%20Unit%2074455%20_NotPetya_%20Malw

4. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgtmCMGOha1_oVhb7kS9GPsLrbBL0ZKnMUEd5bkDRt8z5ceZ

iCmQ8u4VTxgkVFjGuK9SAS5HbwR5puz6DXxa3IH5QBjLdbmbcZOE3Q

5. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUJRNy8JgWfmTFUh08SQ6YvXmAZdJrIwCdYJ7Zpjb4rxQ1P

bivWOm3U5IsOuv4g58C5-oxRHBaIaBYHLbrVNfIIsciXZ4VhGlNl_p

6. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsEuSP7tHacqhnruuCoGcZn78RY7HA_Qqn-zVyuKSJ86EdO

lN1EglhkbF652vrQIh3ZLl0CacpOn3SscyoP0nI6czD4dnBdj-8Ira

7. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiU3haTqO1Y9W7U-L-v9QbBu1eHIRk3hfny_3jad3G_zhS0N

ceiQMGzLdUg5LmVe2Bhh0ic8XI4pPjVl_VPxBCTKIYMBsSQku3VGwc

8. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiziZjqb-IFW5yU8YDYohxnYSvDhSfSW0aQKWsvFQJtR4Pd8

7WHfCKZOjmT_rM-ezlKFEnXWHQXNDZ_PojbZ3DiTTL3dwfsywIp5ev

9. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-ntHlUbybB4ILZrg5emEnmbH9CgnZ-9cUtjpgs_z4jgmwH

_UAtzcKWLQLJso2HQE67xyKzeylvkzFK2FxVKOajB2Yj551M-gpAR5

10.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhZdCAyDknZdS5xWS_c_8D-AtD_8sI8vG1Fq7_7m59W4K5

oGRgKlygJ2MtMl81M_l9sMu_24w2nBtlkC0wItiYtvDuRUJArzZOd8rX

11.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkvapZTWvXXiToKB2u4AKxxrnIugiEcitPQRFXmbG6Nq_

B4NfiytvP4jCxqE4oJqKb7fIsXM0HfFX1k016v5eUxgvAMmHUUjW94Eq

12.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8BRMsXQzRr68DFnZ8gcf4YI7pcj8sqbD7FqheEhmnD-c
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VBAZDv9EyR86DlXM3IsbdBe9VP7O3x_G06yD03AF3PM_xTukWxUztcSv

2.1.3 Where Is Anton Nikolaevich Korotchenko (Антон Николаевич Коротченко) Also Known as Koobface Botnet Master KrotReal? - Part Three (2024-01-07 10:05)

[1]

An image is worth a thousand words. And so is a [2]link and my analysis on the Koobface botnet [3]here.

[4]
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[5]

236



[6]
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[7]

238





1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhKPW82ooGMNgFuVhh0FRMk2Xxofcou5iCByRY_INDopfWcq

nnH8FZEcJMLb6xJl62mUzLZoFCEyMejxNNZ_VuCI91kI1CyC5cCTEU

2. https://ddanchev.blogspot.com/2023/11/where-is-anton-nikolaevich-korotchenko.html

3. https://ddanchev.blogspot.com/search?q=koobface&max-results=20&by-date=true

4. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjeg4v6QOncvXPlpIZuyQbfgmJxPYWP9d6Yq2o8BnQ8UkVv5

SE6hf5R3aEh-E6-6RGSAJLIBovW9U6Vhzhbhmf-NaGdbprCKc4gZdQ

5. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8kyaOlj1Y7cto_8uBIx7-322yjjEMyxjHOOuWy8Ztdb-gQ

yfQ45C33fzlmEXPsMiMyas1jOkj9HWJn7e5Tvdoe6h3D1vg76SURZ1

6. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwEOvjrjjHAAAxz0JB4k82b735lncFmUHcYUaQEkqSzI4rr

rLeGV-pYBuCWhdd7Y1MKTcaft17aA0udVggEt8thXF6casUPsr6heI

7. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPxILS5QJdAo6PzkiVOdrBy03BvBUtjJ7u3hcDsZUQBtcCn

ChzLYcEeETmYXHyTOOlvtpBbLgBvQis6VoctvDNRc5x20UV98c5I3n

2.1.4 The Deepest Gipsy King of Them All? - Yavor Kolev - A Dipshit Courtesy of Republic of Bulgaria on the "International" - "I Have Never Left the Country"

Law Enforcement "Scene" (2024-01-10 04:35)

[1]
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Can you recognize apologies spot a dipship when you see one? Can the recognize the degra-dation between his teeth or what would some other dipshits courtesy of him that don’t exist would consider something that doesn’t exist to begin with the very presence of a human being his teeth and relevant face sculpture to begin with?

This is not poetry. This is the deepest ugliest and most disgusting presence that I would stay a million mile away to skip his relevance of existence to begin with.

There’s a saying. The ones who are distusting are disgusting at all. Beware and don’t even bother the elaboration on this. Watch out for the irrelevance of these people and try to avoid them to the bottom of your brains out and there’s not such word as out. The dipshitness of your overall irrelevance is bothering other to be bottom of their irrelevance. The result? You don’t exist. At all.

If you can spit it try to vomit it but vomit the bottom of your brain’s and idiocity’s irrelevance to the bottom of your brain’s out. We will find and beat the bottom of your irrelevance out to the bottom of your irrelevance out. You’re a disgusting presentation of people who dipshit on each other and then skip the breakfast. And guess what? The dinner.

Stay tuned. But you don’t.

1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRDKUWSNz8NUoM4cMFnSy7tVSmo_3T6KUJHR1mGA0fxY9X3

tNP3ZIiw_EH6LDC64PwWyNNwmSyg5UrJV4CSHqixZCLH_YF3Uev-pH
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2.1.5 Profiling

Russia’s

Internet

Research

Agency

Project

Lakhta

Artem

Mikhaylovich Lifshits (2024-01-12 22:07)

[1]

An image is worth a thousand words. Here’s the [2]link.

Personally identifiable information:

Email: artemlv@hotmail.com

mycryptodeals@yandex.ru

Vkontakte accounts:

hxxp://vk.com/id5856430

hxxp://vk.com/sh0rtnam3

hxxp://vk.com/artemous

Web site: hxxp://smart-shopping.club

[3]
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[7]
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[37]

[38]
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[39]
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[40]

[41]
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[43]
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[44]
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1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgui4e05qGt3CukiJXXODv0wG1k3o2DUytBannyAzWKnAYAQ

2wDYajwfY9JFVP25fim7ssByR86YtRi_pni9llk8AYZBKxB3dWipxW

2. https://www.justice.gov/opa/pr/russian-project-lakhta-member-charged-wire-fraud-conspiracy

3. https://1.bp.blogspot.com/-nIy1qN9c3uU/ZaFUAbsUV9I/AAAAAAAA8hM/XgxHeK32xIggIwB5ysVAJcZDMtzytvn_ACNcBGAsYHQ

/s604/x_ff2a171a.jpg

4. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2mVHQaJSdg1QYYhgjcl8goFCEO9fyUikDMqKMilWQ38sAd

DH7_9G9PiSNODHFRoGGTquEYb4dY2MZxugr9ct5DxOtuBGrblCAi9W

5. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjM6wPvYlLLpDURhrgReDobucFt92fKxfFjCMtFKrkNOMOlo

SO4qCtm96C7KyvCFpZSuAVYPWixcGB7yvgn_3eyp5qWP-vuKydD2cy

6. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEizBsINXYjvm5Kii-NO2YxEbvKYIegu7yOumwLVJj-aDj9o3

r__U4yrdtTX40EBE7mgGNSAfLoW4AG9sAvVpsNBkYClKhoGZSOdw61

7. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgz838OJkDVng0onab2WWyd9hw09z8IpFxMQp6bquVuk8FN9

LgVSp79D-dCKQgyVyUFBRz1sY1LfyxEhsDBAgGzyFS8g7-dmWWuTZc

8. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVE7o9KTvKPlpWNzA8Rg0ewxVmMC6QRjoRQNYJDx6CkhKmk

EtyEux6W9GOSdFf93kWyytBZQOKErzyOAGiqpZxmKx4fc6TJyzPLhg

9. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyw0ALUaugy73DjrUO1LsUXYfcm_FMRDZInqKnBk2EVMcHP

ykxwHlXmqQzj7OtT2kWUCSwegGqsVxwxwUBcwbJAnAJwb5w-IL-4Au

10. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMCyRAnhCMOLk3K6kq9PA0yRuuSG-8hCYQsPS1BE-a6pt

8gBF-nRTKK96YIRuSSgfEq8m3xLAbr1IIPb659Nvrp8jnCvXH-RV_yMM

11. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-Off3yzO0nS243_COP7UUmmVep23FCWPZOL8Y-OwWasW

4u_hVq5SDKxGwmUHoDJSfNwzL39bomee2g15OuHQHSo0YGIH4g8E3y1z

12.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqHMqcUmy2Q9eDDgdWm2x6hsF6Dzkk0lzWJcIOJY9uN7V

SPOslNF9lwGl7er9KRSdKoawUD93NAA1AqrbsucAa3-11RdhtHiohub5

13.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhw91pk_HfrUBgsbqk2wj6jD3L6pGBKeZjXBijpvAUQIn

4AvlxQ0CGYdUXYXrnG2Y6LEfpgi4j-7GkwAjSA_JH6PPrcujH2e7gH8j

14.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgIn7JBTy7Ih6URptiWcEmBrh5ug0t1XZ3IYLWQHklJttO
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K9KEx737Mw3zWKjbt-mqSTzP_DDWVyK1hwoCsi8gPDbDx1anKwMO5HXr

15.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEho1BUxI5qlAWN2Rid65xwTjNwhHuqiiJGBE5COluRP0gL

pKUCu4gT3rRxqUlGcY42XIwlq0SfWfH68YQyaECbyuOW3nM_9mX7kT3B

16.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEicN65C_KLvbx7GZM7RqxJSzAdW8f_uG_6xdHyusoCOPz8

gJjRmXnMtW2QiSM_8HAn52RaeY0R_rkAQA44rmx_XQd993VXiEqQlZcD

17.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmLsn57Pr1tPBXOG-DGqgb3qC8tSALegp_c_ON7700SPI

_CHiEK-4zz_5CeMqGBrXOqEThbkqbwsEj26i790c6mDL1xDYl7OQqPKb

18.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeQxrytnUpfgATcIaDBfHHtkCnW_Ez9Fywt05HQlH_MM-

VTvCoBO3HOpQ9p_wsPJ0tka4o5afASJ6gAK9aO3WIOMlaJrGKGG7VYUD

19.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHHYf-wwZ171uq3fkOagcXEM8FRgsYpedLZ9uEej2Peqr

ZlTGvEQfr6gJez4OjJwdFTtNvtfW8c-ry6qMvQcIW-AYUcEDeAi1rXQ6

20.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEIfEtfn9U1ursRveBYJGbAjzU922CHDJU_z8GAODvt2k

i3csyu_HB2SIiqjWuwFRr3Wudu5Jmn2JHX4GwYalpGfp6OHwLBTjiics

21. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjUmLLQnwoC5h1zXb-anShzHxY-NLQbk65gTOZa5dElnbf

PI6DD4ljh0rqr6MI2alyDq2Ql0O1UmiX4FQG6vhtaTuHL7Z1pCNUDEo5

22. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1dHTfq-3x5RsIP0rPEc32r2SQRfB4ZEuE27x_oTSnYoo

GWwfWLpxAN2mmfckuFWxr9oXKoGeYSafIkbAF_6-SVggcRNepXS5smnX

23.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj2mcLXsu9HSWHMFgrIEZQ8SQDgcsludkEyALhlHsE3s4m

Ake88j7ZvtHWE8n6ee0VKc1Vf5zyFStO2NBSflpuamsU3-LMn72B1UFb

24.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjOd7IbOdcISifZ5axGp0gv9yc8Mi8DPfw9z8nKXkS5Kxr

cxntA-YJhxipzvpc-O6DGDgEb0d5pyZ6unJAlwFfxaarbhnxrbPkzyTE

25. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEja2DXolCwsXCtHocSyIU2iUWXN9HKzi6CcTS7zgx-Rkz0

mu3WO9NduXlC1AnTyfobiNLJO3IYSS6YLlUXGsdWD90Q7VW9pjjOsnMS

26. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiYKzPk_VOq4UIHV1-6QV-tUzlSVZM6Kdz84_0lA_oCCQM

-N-jx6h_ePJX7OZ4NFeiEoAKdEiM9gudnBCYPc3pjxjhNxa3nqM5CQJN

27.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhGYT1aLf9Qdnt2h_arJElZKMHUfHYNlgP6Uc7IU7lyxi8

O7T-JBdIxeGu8Sh8lVo4EHMxaQvacEylc7UVLbSAjr8PI32mgn7A2eb5

28. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPlZc-GzM0MhrO80Pa9cgX_ZLv_ZS9aMcywXgL7F_9OUh

LBagrtUnvGqsKXWBzuApBjhIDve-d16Vr_LoWqCuzmEsfGttHFbDfsud

29. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-aIBzPXjX-XmpUpggvp7MXeRYHb4LqBibba1AVJtZ4vQ

N1gEEQ0Eno0oi8ZmT_S-n87VzGO_PUlgISm0TOSCDZCCAl8slmOqVwYc

30. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjElH3r-fYMZ8ox99bvu4IXVFzvtQe2-7elZHUkCRfzgWF

0sQmyOsy-oQB9tXz2oRi0Uwhp6suzXeG194fOtMF_trV3S0syHlbql9M

31. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQlU-dIYbmPTA8StDSXROA7G93e7W1L6HUSW2t_71izcn

o5dRELlgXpy37fgHVylo98NHJpOWuWip2GPVvYVmBGSn0p6Xgm8-sizp

32. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgesakb49YIw4GSVLTkWi6rFevC2SCB7-cxrLZtEz3enWJ

oQFDh3A1nW3jLMReZsSUfbK1BA81wri7KMx51QP_d0nrquKGQx2Z7zbh

33. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBbk0_qXWRizT-6rhiudXg-8IsUJB_R5AVKoJp-JisuRa

xMUe-SDXvxMFPTuzwvakYxyyJeXuTxnS9BhLR-50PN9dvgVeZVw7Xqo9

34.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhc96bifiVU1iN5GNJLlxXe_lFL4EjBWTLd1eOuvU1m6TS

scx1Ezr_KyYEMnWIYRM526qDMPfY_TIOhgyVNp91-6frDY-x-nsx3GY4

35.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8rN4qsyW_My6duUpb6KXgpHVKOa8ibvDaTIyueVt1P_L

mHGrRMafTmAsH6tSbILg286lVzDoJPwLDNmEURtVOK1Mmi09rbXM7YNc

36.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_hZh3IVWDb3JPfqC9D5WUpOmeNNHAVh8QHe_Ox1Wvhz3

lfoV_GZlmdXkV44YWgtAewxKsi3yWASCYkfbmBnN0zzupMOc-Gghqix0

37. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJEw3K1XErThMb-hGwu4ljnPBOTrbnKLeM4JefarSHOxP

zu_Lllrw8Wu4JzYcO_ZHnZtbDeuCg_FUHXtYx9NuNAcY3WWZBXzGAs68

38.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh2tT3dvxOtsOJwzRxzDFboHWtONFjrKb1rmdfn8BY_gsb

G6kU4x7l-BSV_doLgouYPDJeEs4LIOt3VL9_jY4EcDfwvDnFzZ8_daKL

39. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgSdUwbGZaqmvL42Dp1qniT92vAKwiNNYJX6C4G9iO4k-3
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wxsTmgedduktIZY0zcjqKJQwFmUFANBW5jwnMy8P5Ss1YJA0AS1vaHkE

40.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiVHizkTpSJA-fYcIXlsYQmCBfHStBzligDXwG1KcsZBxv

KamnUzUgXaCRx7fR3nODE4rf3IlIs92YlVQV8hJbT0olOENWJIs9Qo0K

41.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRzL-pFIE0dS6qEF56GVHdIYkHVUMLkPbuaZhyH0ebMqJ

E6PuOBvTSW0aK-V9SN0nnBbbhOTImJcJiGpanp9dG3U_q6gtkHvYQA5R

42.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh2waS5zpnWmHPnwFDzr9OlYaCHOrQk-DzlgAMLzAEYWv_

bocC6CZN6SyAnpOVNb08O0YOp2kT5Xs6QF819G_U0pLv27G9jmkgqGuh

43.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgK1hf4vew8kBpnxgNUCD87NLduIaa0BZe9dcE0KMP3asq

Bz7DEvClh7Sqfyld_TnFaiCKAUdV5Bkl99Gp13A-3jhwzD3di-BGxKGY

44.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgcnO9pxDvzhkm6tVKFchGzX5OsEdb7CnahU4wWOnXHVop

VR4Q3wuf1at3PXobMEfIhN1k_mJdrRoxlDVARwGatoGICc3hHGzm2eyd

2.1.6 Profiling

Internet

Research

Agency’s

Anna

Vladislavovna

Bogacheva

(2024-01-12 22:08)

[1]

An image is worth a thousand words. Here’s the [2]link.
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[3]

1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj3YGUsAy0vyG6SzbTz53zhasCnLdBPSov6z2ywYDSgBKNl-

wz9358VR9oal9MTTq8vW_A1blKs0XvmihzZVVGgDBIlqzO43H4ZK1U

2. https://www.fbi.gov/wanted/counterintelligence/anna-vladislavovna-bogacheva

3. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEirxwytZjRKXT0Zx3uAeUrJfU98LFaq6vHgLfGIiCs6koReF

JosVdTb6m2QReqORMyIPnswm6eHQ1xNzio8MctceERJE2KpnRZ9Zff

2.1.7 Who’s Behind GoatRAT? (2024-01-13 23:01)

[1]

In this brief analysis I’ll take a look at who’s behind GoatRAT in terms of social media activity C &C servers and actual personally identifiable information.

Personally identifiable information:

hxxp://bit[.]ly/nubankmodulo

hxxp://goatrat[.]com/apks/apk20[.]apk
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Sample MD5s:

6583a9b6b83738e0bf2a261fc04483e18772da3241e467fdef37a8e27b1869a7

9a8e85cf1bbd32c71f0efa42ffedf1a0

hxxp://api[.]goatrat[.]com:3008

Social Media:

hxxp://t[.]me/sickoDevz

hxxp://t[.]me/goatmalware

Web site:

hxxp://criminalmw[.]fun

hxxp://clientes[.]criminalmw[.]fun

WhatsApp - +5511987457894

ba5833b49e2c6501f5bbce90b7948a85

Code Signing Certificate Signed By: Mr[.] Paxton Doyle PhD

SSL: 94ba7810ece1a1b227e6a5b509c8bb228e7285a1a5cee5f0ee26542783d4b09a Sample C &C servers:

104[.]244[.]75[.]74

138[.]197[.]166[.]92

142[.]251[.]143[.]110

142[.]251[.]143[.]129

142[.]251[.]143[.]142

142[.]251[.]143[.]163

142[.]251[.]143[.]193

142[.]54[.]162[.]114

159[.]69[.]27[.]103

174[.]128[.]250[.]164

185[.]204[.]1[.]84

185[.]225[.]68[.]133

188[.]214[.]132[.]49

216[.]239[.]32[.]36

216[.]239[.]34[.]36

31[.]133[.]1[.]108

51[.]148[.]150[.]203

51[.]81[.]93[.]37

80[.]241[.]214[.]102

82[.]128[.]229[.]109
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93[.]115[.]91[.]66

95[.]216[.]209[.]129

Sample C &C servers:

tgutjgo6kvqdst5ock[.]com

olbvu5pv2apkc57zfeg[.]com

hxxp://h4j7ewfdpwfzg6g6[.]com - 185[.]177[.]206[.]72

hxxp://3ajzfjsxou4yzn3jw552dg[.]com - 87[.]236[.]195[.]198

hxxp://f53ia7lqhbg54y7xd7ydp3[.]com - 178[.]63[.]41[.]183

hxxp://lblhluz7or[.]com - 178[.]63[.]41[.]183

hxxp://inylslu7vfq24vb[.]com - 185[.]177[.]206[.]72

51[.]81[.]56[.]136

89[.]163[.]128[.]25

81[.]7[.]16[.]177

81[.]170[.]128[.]221

109[.]70[.]100[.]71

158[.]255[.]1[.]112

j6jvmwqorhq4xpjkcy26d3i4au6pz6nyroqxreefmnl7yxgcruxzkmyd[.]onion Sample Photos:

[2]

[3]
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[4]

[5]
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1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAUSIRxNbL3Zsd1fYZl0-uM5C4uxZLrGegZ55InsJRvTMOq

9nnK9_LPqHLibdMiIHXTjYRDI5s_dKKOqGxNLjQMpPKOh3U1NpMX2Q

2. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhlBxlp2efLOUA7_JvpROaaNIyRV7QIB50xsa4YgimK7_g4z

mGlVeLScLlJMkqwIYmvEzz2nLMTjn6KiatL_H8NEQkj1zirz7lQq-5

3. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg7Lh3BlzdJQKkbMVvFx1GD59xluCWVsa67bdV6SA6Hmf6FD

lb5Qye7-rR_WjvDELiI3MIym6b57z3-mAhbvDwd_UBvc5GhYzjIGXF

4. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg7axt9T9DPVYG2UxKz03mjTwuirqvRpCBNeXB93UV20FCTl

EwkO9uYbkrEHD6NupMDa_Ex060_8xWxg02bYvJ5gtCwJF21KTJlg_w

5. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGX7pyyqzcX_o1Bdy7lsn6ZcUUE4FzTciXEjMzTJOHvIX15

zmOEEdWapeGIT8oFhyqGRGZ_wKRtye1oYY6xJDssb7rpSilYSXxIgl

2.1.8 Who Can Improve My Wikipedia Article? (2024-01-15 20:12) Who can assist and improve my [1]Wikipedia article?

Thank you.

[2]
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1. https://en.wikipedia.org/wiki/Draft:Dancho_Danchev

2. https://blogger.googleusercontent.com/img/a/AVvXsEiO2Z-aeWX4D3tYDEatdFS0wP4oTJB9wNV9M-OnyOmKHJ79Pr9IDXybdA

D0M-4FsclMmPaepoeFbJ_Ms1tPsxlUa15zVJ9wKcLodgQ1xIAtQBiN

2.1.9 Retiring (2024-01-16 18:37)

[1]
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I’m retiring. Ebay memorabilia auction soon with some surprises. I’ll post a link here. All of my research 2005-2023 here - [2]https://archive.org/details/@ddanchev Yours sincerely. Dancho

[3]
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[4]
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[5]

288



[6]
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1. https://blogger.googleusercontent.com/img/a/AVvXsEjeo9z24sXm_elVK4kEg_mv59pP5lcSHw36fIltkJMpSnexf83GaKmUzS

lgHBEjohr7nl8pPalpcdca5nCFFDzvDOsssqQfgMPkjhgHmDDLIGEv

2. https://archive.org/details/@ddanchev

3. https://blogger.googleusercontent.com/img/a/AVvXsEjTVNXiAUJLXA2_BkdtgfbZfzpYJ1OtzJ61VbP8jfl234EEqSVOKV77IW

KtsDi2Y48hMwZIDuxif4qnozPbbjqVBFjnaZz3m4ylWRcDiokoUk9V

4. https://blogger.googleusercontent.com/img/a/AVvXsEhpPPCKoCg8vEYU4Pb_Dl6_1dUtWju9R43zQMYu8VwnkHxg0NZ3R5i0Ap

jbvgyqNnBhtbJEG9cS6IHdSCo7N1v3R2WI8HVSxyOSWHZyxCVf2_Yw

5. https://blogger.googleusercontent.com/img/a/AVvXsEhq6qUlQcTkSJM0DgrklK8Wp0iOdMqJ2lL7kYMii2j8bq5IitSL_OA_-j

LF8lMU5Mj144iR6tv98Ny4lHTC-lyAhjUU0U09uMHLHCc_vyF-5bkY

6. https://blogger.googleusercontent.com/img/a/AVvXsEiubIHVThg8z-75vSq-ucfpcCZSjSnW3Kjmlf9M6xuTtkQaae0jdaOTPD

aAFhpT3hGFI1UmIScg1mxNg7x0ndp40spi9YG24Kk0uVDjltrkgkfH
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2.1.10 Auction Onion (2024-01-18 14:25)

[1]

[2]Dark Web Onion.

1. https://blogger.googleusercontent.com/img/a/AVvXsEi0QwGUTiBcAfWdgc_Fxidmq9xkLbvTIPoLCwQr9EeWN6SslktwheNncn

6EKE045jJZpmCIWjC2ADMAiA8vG0CQslC8laNf9Bg4xP8H5dsFooaA

2. http://cnaomocftxw3wh7gyyct5kpf3rctteornc7uup7ak4oiyy35ypvd3lid.onion/

2.1.11 Research Compilation 2005-2023 - Torrent (2024-01-20 00:47)

[1]

291



UPDATE:

[2]New link.

[3]
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1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhbtyyHD-wb5Vv4xbULUHGTaQwWYd-vBDs57ygQLC4NjDRfw

lc8xMTIzEjxfUnXOUm1fbCyucApV9J9HIisBU7vjhBw-Md9Q5IQaz-

2. https://drive.google.com/file/d/1bmwTzOtVb2Vxqp5Wc7xSy_UFnmxmJW4Y/view?usp=sharing

3. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiz2I-S-q6_0YvRzMjCEnFDxwtEzstKqsX9kOzJoatrGrksx

iW8qF8jvcZZSYHPjV6VRMNjwgOp9fqjvbn783nrhqNsPNbPUx9j-06

2.1.12 Cybercrime Forum Data Set - 2024 - Torrent (2024-01-20 11:09)

[1]

UPDATE:

[2]New link.
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[3]

[4]

[5]

[6]
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[7]

[8]

[9]
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[10]

296





1. https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimJCZ0qJspXxQA-Q9aWZIa51hnk2m4dSz_jwlRG4goumtHV

3oALHDzR9LieLjkL2JDqgFcozrZhh9B9xm6JIL3bKCx0i3dMz54A5W

2. https://drive.google.com/file/d/13cWsB8cQBE560v2SpHN-1WXwbQeK3l3-/view?usp=sharing
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2.2 February

2.2.1 A Case Study on a Bulgarian Dipshit Local Drug Addict Gang Member and A Peasant From Troyan, Bulgaria Part of The Gang that Robbed and Kidnapped and Home Molested Me (2024-02-11 10:48)
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When you’re so dumb that even the "drugs" can’t "catch you". The next thing that follows is the laughing.
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2.2.2 Petar Shoshkov - Exposing a Bulgarian Troyan City Based Bottom Sucking Gang Member That Robbed Home Molested and Kidnapped Me (2024-02-11 10:48)
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Is it the "lack" of or the lack of?
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2.2.3 The Ugliest Bulgarian Wannabe Law Enforcement Officer Real Life "Cop" In the Bulgarian "System" (2024-02-11 10:48)

[1]

301



[2]

Can you suck my bottom? Do you have the permission of other people to do it before you suck mine? Do you know what does this constitutes? Let’s play a game. If my bottom is in the ugliest and most disgusting part of the universe and you want to suck it does this mean that you’re there too? You don’t exist.

We in the face of your parents should rather pay you to best yourself and stop existing and make a free low profile non-existent and cheap movie out of it which is something that you shouldn’t forget doesn’t constitute anything. It’s the very art of having you beat yourself courtesy of your parent’s money and having the very same non-existent Bulgarian dipshits pay you to beat yourself. While beating yourself you can easily forget about compilations and series of movies about your beating simply because your very ugliness and disgusting existence doesn’t compare to that of a human being.
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